| Package | Affected versions | Patched versions |
|---|---|---|
| calendar module | = 8.4 | |
| endonesia | = 8.4 |
SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter in a list_events action to mod.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free