SuperCali Event Calendar SQL Injection Vulnerability

vendor:

Event Calendar

by:

t0pP8uZz & xprog

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: Event Calendar

Affected Version From:

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2007

Pull out members info from the database.

Implement proper input validation and parameterized queries to prevent SQL injection.

Source