CVE-2007-1845

The CVE-2007-1845 entry discusses a SQL injection in the PHP-Fusion Expanded Calendar (calendar_panel) 2.00 module, exploitable via the m_month parameter in show_event.php. The root cause is unauthenticated input (m_month) being used to construct SQL, allowing remote attackers to alter queries an...