← Database

CVE-2010-0635

HIGH CVSS: 7.5 Published: 2010-02-12 Modified: 2026-06-16

Description

SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected Platforms

Jevents Jevents Search PluginJoomla Joomla\!

Weakness Type

CWE-89

References