CVE-2012-2925

The CVE-2012-2925 entry concerns a SQL injection in engine.php of Simple PHP Agenda 2.2.8, exploitable via the priority parameter in addTodo. The root cause is unsanitized/concatenated input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Affected software: Simpl...

CVE-2008-3031

CVE-2008-3031 affects Simple PHP Agenda 2.2.4 and earlier. A directory traversal vulnerability in index.php allows remote attackers to include and execute arbitrary local files by supplying a ".." in the page parameter. This is the underlying cause and the documented impact is arbitrary local fil...