CVE-2025-0929 — SQL injection vulnerability in TeamCal Neo

CVE-2025-0929

SQL injection vulnerability in TeamCal Neo PUBLISHED

Description (CNA)

SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a malicious SQL statement via the ‘abs’ parameter in ‘/teamcal/src/index.php’.

Affected (CNA)

Vendor / product	Versions
Lewe / TeamCal Neo	affected 3.8.2

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-teamcal-neo

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.