88Script Event Calendar Security Vulnerabilities - February

CVE-2005-3933

SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter.