← Database

CVE-2008-5737

HIGH CVSS: 7.5 Published: 2008-12-26 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected Platforms

Nodstrum Mysql Calendar

Weakness Type

CWE-89

References