CVE-2014-10015

High

Published: 13/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2014-10015 is an SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 that allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or modification.

Recommendation

It is recommended to update to the latest version of PHPJabbers Event Booking Calendar and implement input filtering and validation in the application.

Other vulnerabilities in PHPJabbers Event Booking Calendar 2.0

CVE-2023-40765Critical
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.

Original NVD description (English source)

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.