CVE-2025-0929

SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a malicious SQL statement via the ‘abs’ parameter in ‘/teamcal/src/index.php’...

CVE-2025-0929 SQL injection vulnerability in TeamCal Neo

SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a malicious SQL statement via the ‘abs’ parameter in ‘/teamcal/src/index.php’...

CVE-2025-0929

CVE-2025-0929 is a SQL injection in TeamCal Neo 3.8.2. An attacker can retrieve, update, and delete all database information by injecting a malicious SQL statement via the abs parameter in /teamcal/src/index.php. The NVD entry lists CVSS 3.1 base score 9.8 (CRITICAL) with network access required,...