SQL injection vulnerability in Spider Event Calendar 1.4... · CVE-2015-2196 · GitHub Advisory Database · GitHub

SQL injection vulnerability in Spider Event Calendar 1.4...

High severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a spiderbigcalendar_month action to wp-admin/admin-ajax.php.

References

Published by the National Vulnerability Database

Mar 3, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 28, 2023