CVE-2012-2363

CVE-2012-2363 affects Moodle 1.9.x prior to 1.9.18. The calendar implementation’s calendar/event.php is vulnerable to SQL injection via a crafted calendar event, allowing remote authenticated users to execute arbitrary SQL commands. The issue originates from unsanitized input used in SQL queries ...