Sql injection

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...