CVE-2013-3961

Description

SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter.

Weakness classification

• CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Primary references

• cve@mitre.org — Broken Link
• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Exploit, Issue Tracking
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory