CVE-2007-3515 SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 10.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sweetphp totalcalendar | <= 2.402 | No fix listed |
References
- 36337 vdb-entry
- 25899 third-party-advisory vendor-advisory
- 24716 exploit vdb-entry
- ADV-2007-2401 vdb-entry
- totalcalendar-viewevent-sql-injection(35189) vdb-entry
- 4130 exploit