EUVD-2023-43977

Malicious code in bioql PyPI...

Sql injection

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

CVE-2023-3307

CVE-2023-3307 affects miniCal 1.0.0 with a SQL injection vulnerability in the /booking/show_bookings/ endpoint via the search_query parameter. Multiple sources confirm remote exploitation chances and public disclosure. Root cause: lack of input validation on the search_query parameter leading to ...