CVE-2008-6319

Cfmsource CF Calendar - SQL Injection

Title source: rule

Description

SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by AlpHaNiX · perlwebappsasp
https://www.exploit-db.com/exploits/7413

Scores

EPSS 0.0049
EPSS Percentile 65.4%

Details

CWE
CWE-89
Status published
Products (1)
cfmsource/cf_calendar
Published Feb 27, 2009
Tracked Since Feb 18, 2026