Description
SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event.
Remediation
References
Related Vulnerabilities
Moodle Other Vulnerability (CVE-2007-3555)
Squid Improper Input Validation Vulnerability (CVE-2020-24606)
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (1.9.2)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3835)
WordPress Plugin FeedWordPress Cross-Site Scripting (2014.0805)