CVE-2009-4158

CVE-2009-4158 : A SQL injection vulnerability exists in the TYPO3 Calendar Base (cal) extension before 1.2.1, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affects the TYPO3 Calendar Base extension up to version 1.2.0. Root cause is improper handling of user...