Benders.Calendar.PHP.SQL.Injection

Release Date Dec 15, 2009
Severity medium
Impact Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Description This indicates an attack attempt to exploit an SQL-injection vulnerability in index.php. The vulnerability is a result of the application's failure to properly sanitize user input before using it in an SQL query. As a result, a remote attacker can send a crafted query to execute SQL commands on a vulnerable server.
Affected Products Benders Calendar Benders Calendar 1.0
Recommended Actions Upgrade to the latest version, available from the website: http://sourceforge.net/projects/benderscalendar/
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2006-0252
Reference/s http://www.securityfocus.com/bid/16242 (BugTraq)

Fortinet