SQL Injection

XWiki Full Calendar Macro is vulnerable to SQL Injection. The vulnerability is due to a SQL injection vulnerability by accessing database info or starting a DoS attack, where users with the right to view the Calendar.JSONService page including guest users can exploit this issue and access databas...

The vulnerability of the Full Calendar Macro extension of the XWiki collaborative web application lies in the lack of protective measures for the SQL query structure. This allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause a denial-of-service attack.

The vulnerability of the Full Calendar Macro extension of the XWiki platform relates to the lack of measures taken to protect the SQL query structure during the processing of the JSONService.xml page. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

The vulnerability of the Full Calendar Macro extension of the XWiki collaborative web application lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Full Calendar Macro extension of the XWiki collaborative web application platform is related to insufficient protection of operational data during the processing of the JSONService.xml page. Exploiting this vulnerability could allow an attacker to gain unauthorized access...

XWiki Full Calendar Macro 信息泄露漏洞

XWiki Full Calendar Macro is an open source log table extension component for XWiki. An information disclosure vulnerability exists in XWiki Full Calendar Macro versions prior to 2.4.6, which originates from a user with permission to view the Calendar.JSONService page may be able to access databa...