Application: EasyCalendar
Affected Version: 4.0tr and other versions.
Vendor’s URL: EasyCalendar
Bug Type: SQL Injection and Cross Site Scripting
Risk Level: Critical
Solution:
Edit the source code to ensure that input is properly sanitized.
Search
Subscribe
Latest
- eGroupWare File Upload
- Joomla Jom Comment Component Unspecified SQL Injection
- WordPress WP-Download Plugin SQL Injection
- AuraCMS SQL Injection
- Simple Gallery XSS
- Drupal Webform Module Unspecified Script Insertion
- PHP Photo Gallery SQL Injection
- Wikepage Information Disclosure
- Drupal Menu System Security Bypass
- Gallery Script Lite Information Disclosure
