← Database

CVE-2007-3515

CRITICAL CVSS: 10.0 Published: 2007-07-03 Modified: 2026-06-16

Description

SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Sweetphp Totalcalendar

Weakness Type

NVD-CWE-Other

References