Security Advisory
CVE-2010-4993
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.