WP-Cal 0.3 - editevent.php SQL Injection

The wp-cal WordPress plugin was affected by an editevent.php SQL Injection security vulnerability...

CVE-2013-3929: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editevent.php in CMS Made Simple CMSMS 1.11.9 allows remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter...

PT-2013-4750

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 1.11.9 Description A cross-site scripting issue exists, allowing remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter in the...

CVE-2008-0490

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0490: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Wordpress Plugin WP-Cal 0.3 editevent.php SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------------- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------------------------------------------------------------- Author : Houssamix From H-T Team Script : Wordpress Plugin WP-Cal Download :...