Description (CNA)
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LuxSoft / The LuxCal Web Calendar | affected prior to 5.3.3M (MySQL version) |
| LuxSoft / The LuxCal Web Calendar | affected prior to 5.3.3L (SQLite version) |
CWE
CWE-89
References
- https://www.luxsoft.eu/?download
- https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984
- https://jvn.jp/en/jp/JVN26024080/
ADP enrichment
No English description supplied.
No references supplied.