CVE-2006-0673

CVE-2006-0673 affects Magic Calendar Lite 1.02. The vulnerability is a SQL injection in cms/index.php, exploitable when magic_quotes_gpc is off, via the parameters $total_login and $total_password . Outcomes include unauthorized SQL command execution against the backend. Public sources (NVD and e...