2024-05-26 14:27:05 +02:00
### [CVE-2008-0490](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0490)

2025-09-29 21:09:30 +02:00


2024-05-26 14:27:05 +02:00
### Description
SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
### POC
#### Reference
- https://www.exploit-db.com/exploits/4992
#### Github
2025-09-29 21:09:30 +02:00
- https://github.com/20142995/nuclei-templates
2024-05-26 14:27:05 +02:00