EIP-2026-109227
PRE-CVELuxCal Web Calendar 2.4.2/2.5.0 - SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109227. PoCs published by kaMtiEz.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in LuxCal Web Calendar versions 2.4.2 and 2.5.0. The vulnerability allows an attacker to inject malicious SQL queries via the 'id' parameter in the 'index.php' file, potentially leading to unauthorized data access or manipulation.
Description
LuxCal Web Calendar 2.4.2/2.5.0 - SQL Injection
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in LuxCal Web Calendar versions 2.4.2 and 2.5.0. The vulnerability allows an attacker to inject malicious SQL queries via the 'id' parameter in the 'index.php' file, potentially leading to unauthorized data access or manipulation.