|
eNdonesia Calendar Module SQL Injection Vulnerability
The Calendar module for eNdonesia is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Note that the Calendar module is not shipped with eNdonesia by default. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. NOTE: Currently we don't which versions of the module are affected by this issue. |
|
|
Privacy Statement |
