Описание
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php.
Ссылки
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0:*:*:*:*:*:*:*
cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.3:*:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.01332
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php.
EPSS
Процентиль: 68%
0.01332
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other