All vulnerabilities

Servers and applications

CVE-2015-4654

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.

Severity
High 7.5
Published
18 Jun 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Joomla!Servers and applications · cpe:a:joomla:joomla\!
  • Every version

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-4654
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-4654