Approved changes feed: RSS · Atom

cpe:2.3:a:kaysongroup:php_event_calendar:*:*:*:*:lite:*:*:*

part: a version: * update: *

VendorKaysongroup (7e2bcaa5-be74-55ef-827f-9f5e5162e431)
ProductPhp Event Calendar (83ab708e-e8ff-5fe7-bbbb-b92faff71d03)
Edition*
Language*
Software editionlite
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42077 vulnerable 2026-06-08 05:35:21.757629 Details available
PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter. This can be used to execute SQL statements directly on the database, allowing an adversary in some cases to completely compromise the database system. It can also be used to bypass the login form.
Published: 2021-11-08T04:01:18.000Z
Updated: 2024-08-04T03:22:25.984Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.