CVE-2013-3961

MEDIUM 6.5CVE-2013-3961 · Published 11/03/2014 · updated 16/06/2026

In short

CVE-2013-3961 is a MEDIUM (CVSS 6.5) vulnerability affecting simple php agenda (abeel).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple php agenda abeel	`= 0.1= 0.1.1= 0.1.2= 0.2.0= 0.2.1= 0.2.2= 0.2.3= 0.2.4= 0.2.5= 0.2.6= 0.2.7= 0.3.0= 0.3.1= 0.3.2= 0.3.3= 1.0.0= 1.0.1= 2.0.0= 2.1.0= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.7≤ 2.2.8`	No fix yet

Description

SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter.

References

osvdb.org/94141 · Broken Link
packetstormsecurity.com/files/121978/Simple-PHP-Agenda-2.2.8-SQL-Injection.html · Exploit
seclists.org/fulldisclosure/2013/Jun/67 · Exploit
exploit-db.com/exploits/26136 · Exploit
securityfocus.com/bid/60481 · Exploit
webera.fr/advisory-02-php-agenda-isql-exploit · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/84938

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free