Lucene search
+L
Php-fusionExpanded Calendar Module

1 matches found

CVE
CVE
added 2007/10/03 2:0 p.m.44 views

CVE-2007-5187

The CVE-2007-5187 entry describes a SQL injection vulnerability in the Expanded Calendar 2.x module for PHP-Fusion, specifically in infusions/calendar_events_panel/show_single.php, where an attacker can pass input through the sel parameter to execute arbitrary SQL commands. This is tied to remote...

7.5CVSS8.4AI score0.04189EPSS
SaveWeb