CVE-2011-5109
Freelancer Calendar < 1.01 - SQL Injection via SearchField Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-5109. PoCs published by muuratsalo.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Freelancer Calendar <= 1.0.1, detailing affected endpoints and parameters. It includes a disclosure timeline and proof-of-concept URLs but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_statistics_list.php, (4) customer_list.php, and (5) task_statistics_list.php in the worldcalendar directory.
Exploits (1)
The provided text describes a SQL injection vulnerability in Freelancer Calendar <= 1.0.1, detailing affected endpoints and parameters. It includes a disclosure timeline and proof-of-concept URLs but lacks executable exploit code.