3 matches found
CVE-2008-6038
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...
Sql injection
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...
CVE-2008-6038
CVE-2008-6038 describes a SQL injection vulnerability in the MapCal 0.1 application where the parameter id in the editevent action of index.php can be manipulated to execute arbitrary SQL commands. This remote issue could allow attackers to alter or read data, depending on the database and privil...