CVE-2008-3452

Summary of CVE-2008-3452 : A SQL injection vulnerability exists in the Calendar module of eNdonesia 8.4, exploitable via the loc_id parameter in the list_events action to mod.php. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 6.8 (Medium) w...