CVE-2012-2363

CVE-2012-2363 affects Moodle 1.9.x prior to 1.9.18. The calendar implementation’s calendar/event.php is vulnerable to SQL injection via a crafted calendar event, allowing remote authenticated users to execute arbitrary SQL commands. The issue originates from unsanitized input used in SQL queries ...

CVE-2012-2363: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event...