Lucene search
PRIOn knowledge basePRION:CVE-2021-42077HistoryNov 08, 2021 - 4:15 a.m.
Sql injection
2021-11-0804:15:00
PRIOn knowledge base
www.prio-n.com
3
PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter. This can be used to execute SQL statements directly on the database, allowing an adversary in some cases to completely compromise the database system. It can also be used to bypass the login form.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_event_calendar | eq | < 202193 |
Related
nvd
nvd
CVE-2021-42077
2021-11-08 04:15:08
packetstorm
packetstorm
PHP Event Calendar Lite Edition SQL Injection
2021-11-05 00:00:00
cvelist
cvelist
CVE-2021-42077
2021-11-08 04:01:18
cve
cve
CVE-2021-42077
2021-11-08 04:15:08
zdt
zdt
PHP Event Calendar Lite Edition SQL Injection Vulnerability
2021-11-06 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Event Calendar SQL Injection (CVE-2021-42077)
2021-11-28 00:00:00
cnvd
cnvd
PHP Event Calendar Lite Edition is vulnerable to SQL injection
2021-11-10 00:00:00