CVE-2008-2868

CVE-2008-2868 affects DUware DUcalendar 1.0 (and possibly earlier). The vulnerability is in detail.asp and allows SQL injection via the iEve parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the existence and nature of the flaw and its impact,...