CVE-2023-0675 - Calendar Event Management System sql injection

Back Back to CVE browser

HIGH

Calendar Event Management System sql injection

Published Feb 4, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.73%

Description

A vulnerability, which was classified as critical, was found in Calendar Event Management System 2.3.0. This affects an unknown part. The manipulation of the argument start/end leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220197 was assigned to this vulnerability.

Affected products

Vendor n/a Product Calendar Event Management System Default
n/a
- Version
  2.3.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Calendar Event Management System

n/a

Version	Status	Constraints
2.3.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://vuldb.com/?ctiid.220197
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.220197
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
https://www.youtube.com/watch?v=eoPuINHWjHo
media-coverageExploitThird Party Advisory

Link	Providers	Tags
https://vuldb.com/?ctiid.220197		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.220197		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
https://www.youtube.com/watch?v=eoPuINHWjHo		media-coverageExploitThird Party Advisory