THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2017-20268 (HIGH 8.2) — Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'eid' parameter. Attackers can send GET requests to the RSVP plugin endpoint with craft

[NVD] CVE-2017-20268 (HIGH 8.2) — Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'eid' parameter. Attackers can send GET requests to the RSVP plugin endpoint with craft

lownvdPublished 2026-06-19

CVE-2017-20268 CVSS: 8.2 HIGH Published: 2026-06-19T17:16:13.930

Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'eid' parameter. Attackers can send GET requests to the RSVP plugin endpoint with crafted SQL payloads to extract sensitive database informat

Indicators of compromise

CVE-2017-20268cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2017-20268