PT-2021-23509

Name of the Vulnerable Software and Affected Versions PHP Event Calendar versions prior to 2021-09-03 Description The issue allows SQL injection, as demonstrated by the "/server/ajax/user manager.php" endpoint, specifically the username parameter. This can be used to execute SQL statements direct...