PT-2019-13879

Name of the Vulnerable Software and Affected Versions REDCap versions prior to 9.3.0 Description The issue allows for time-based SQL injection in the edit calendar event via the cal id parameter. An attacker can exploit this to obtain a user's login sessionid from the database and then re-login...

Synology Calendar Improper Authorization Vulnerability

Synology Calendar is a file protection program from Synology that runs on Synology NAS devices. An authorization issue vulnerability exists in SYNO.Cal.Event in Synology Calendar. A remote attacker can exploit this vulnerability to create arbitrary events with the 'calid' or 'originalcalid'...

PT-2018-18725

Name of the Vulnerable Software and Affected Versions Synology Calendar versions prior to 2.1.2-0511 Description The issue is related to improper authorization, allowing remote authenticated users to create arbitrary events. This can be achieved via the cal id or original cal id parameters...