Sql injection

2023-11-1406:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

oss calendar

remote attacker

execute code

alter database

security vulnerability

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.0%

JSON

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.

CPENameOperatorVersion
oss_calendarlt2.0.3

CPE	Name	Operator	Version
	oss_calendar	lt	2.0.3

References

jvn.jp/en/jp/JVN67822421/

oss-calendar.com/news/20231113/