PHP Event Calendar SQL Injection (CVE-2021-42077)

An SQL injection vulnerability exists in PHP Event Calendar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-42077

CVE-2021-42077 affects PHP Event Calendar Lite edition prior to 2021-09-03. Multiple connected sources confirm an SQL injection vulnerability exploitable via the /server/ajax/user_manager.php username parameter, enabling execution of arbitrary SQL and, in some cases, bypassing login. The issue is...

PHP Event Calendar Lite Edition SQL Injection Vulnerability

Product: PHP Event Calendar Manufacturer: Kayson Group Ltd. Affected Versions: PHP Event Calendar Lite edition Tested Versions: PHP Event Calendar Lite edition Vulnerability Type: SQL injection CWE-89 Risk Level: High Solution Status: Closed Manufacturer Notification: 2021-08-09 Solution Date:...