JVN#67822421: OSS Calendar vulnerable to SQL injection

OSS Calendar provided by Thinkingreed Inc. contains an SQL injection vulnerability (CWE-89).

Impact

A logged-in user may execute an arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.

Solution

Update the software
Update the software according to the information provided by the developer.

Products Affected

• OSS Calendar versions prior to v.2.0.3