SQL Injection Vulnerability in No Boss Calendar for Joomla
CVE-2025-49468

8.6HIGH

Key Information:

Vendor

Nobossextensions.com

Status
No Boss Calendar Component For Joomla
Vendor
CVE Published:
13 June 2025

What is CVE-2025-49468?

A vulnerability exists in the No Boss Calendar component for Joomla prior to version 5.0.7, which enables remote authenticated users to exploit the id_module parameter. This allows malicious users to execute arbitrary SQL commands, potentially compromising the integrity of the database and exposing sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

No Boss Calendar component for Joomla 1.0.0-5.0.6

References

https://nobossextensions.com/
product

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kamil Szczurowski
Robert Kruczek
JSON
.