CVE-2006-4906

The CVE-2006-4906 entry documents a SQL injection in More.groupware 0.74, specifically in modules/calendar/week.php where the new_calendarid parameter can be exploited to execute arbitrary SQL commands. Affected component: More.groupware 0.74 (calendar module). Root cause: unsanitized input in ne...