CVE-2010-4942

The CVE-2010-4942 entry describes an SQL injection in the eCal module’s location.php for E-Xoopport Samsara 3.1 and earlier, exploitable via the lid parameter. Affected component: location.php in the eCal module of Samsara 3.1 and older. Root cause: unsafely constructed SQL commands through lid, ...