SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and previous versions module for Xoops allows remote malicious users to execute arbitrary SQL commands via the id parameter in a show action.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
chapi tiny event |