CVE-2025-0930

Reflected Cross-Site Scripting XSS in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’...

CVE-2025-0929

SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a malicious SQL statement via the ‘abs’ parameter in ‘/teamcal/src/index.php’...

PT-2025-4100

Name of the Vulnerable Software and Affected Versions TeamCal Neo version 3.8.2 Description The issue is a SQL injection vulnerability that could allow an attacker to retrieve, update, and delete all database information by injecting a malicious SQL statement via the abs parameter in the...