CVE-2008-6378

This CVE (CVE-2008-6378) affects Calendar Mx Professional 2.0.0 and arises from a SQL injection in calendar_Eventupdate.asp where the ID parameter is not properly sanitized. Remote attackers can execute arbitrary SQL commands via that parameter. The vulnerability is rated CVSSv2 base score 7.5 (H...

CVE-2008-6378: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...