CVE-2012-4240

SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter...

CVE-2012-4240

Group-Office Calendar SQL Injection (CVE-2012-4240) affects Group-Office community versions prior to 4.0.90. The vulnerability lies in modules/calendar/json.php where the sort parameter is unsafely injected into an ORDER BY SQL clause. An authenticated user can exploit this to cause database erro...

CVE-2012-4240

SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter...

Group Office Calendar (calendar/json.php) SQL Injection

No description provided by source. /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability locate...

Group-Office Calendar SQL Injection

/------------------------------------- | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP file...

Group Office Calendar - calendarjson.php SQL Injection

Group Office Calendar - calendarjson.php SQL Injection /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

Group-Office Calendar 4.0.88 SQL Injection Vulnerability

Exploit for php platform in category web applications /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

Group Office Calendar - '/calendar/json.php' SQL Injection

/-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP...