2018-01-29

2018-01-30

2018-01-31

All (3) Critical (3) High (6) Medium (6) Low (1)

CVE-2018-6398 CRITICAL POC Act Now

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Event Calendar

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

2.7%

CVE-2018-6395 CRITICAL POC Act Now

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Visual Calendar

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

2.7%

CVE-2018-6376 CRITICAL Act Now

In Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Joomla

NVD

CVSS 3.0

9.8

EPSS

4.7%