EIP-2026-109227

This exploit demonstrates a SQL injection vulnerability in LuxCal Web Calendar versions 2.4.2 and 2.5.0. The vulnerability allows an attacker to inject malicious SQL queries via the 'id' parameter in the 'index.php' file, potentially leading to unauthorized data access or manipulation.