CVE-2023-47609 (published 2023-11-14T05:12:19.484Z)
SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.
Affected products: Vendor: Thinkingreed Inc.
Product: OSS Calendar
Versions: prior to v.2.0.3