CVE-2009-3116

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action...

CVE-2009-3116

CVE-2009-3116 is a SQL injection in the Uiga Church Portal, affecting the index.php calendar action where the year parameter can be manipulated to execute arbitrary SQL. The vulnerability is remote-exploitable with high impact (CVSS v2 base 7.5; Confidentiality, Integrity, and Availability partia...