CVE-2008-6038 SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dsp_editevent.php.
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dsp_editevent.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mapcal | = 0.1 | No fix listed |
References
- 0x90.com.ar exploit
- 20080921 MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection mailing-list
- 31304 exploit vdb-entry
- ADV-2008-2647 vdb-entry