← Database

CVE-2010-2131

HIGH CVSS: 7.5 Published: 2010-06-02 Modified: 2026-06-16

Description

SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data.

Affected Platforms

Typo3 Typo3Mario Matzulla Cal

Weakness Type

CWE-89

References