CVE-2014-10015

2022-10-0316:20:44

mitre

www.cve.org

sql injection

phpjabbers

event booking calendar 2.0

remote attackers

arbitrary sql commands

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.9%

JSON

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

References

packetstormsecurity.com/files/124753/eventbookingcalendar-xssxsrfsql.txt