PT-2015-7485

Name of the Vulnerable Software and Affected Versions CP Reservation Calendar plugin versions prior to 1.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in a "dex reservations calendar load2" action or the dex item...