Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2009-3116 1 Uiga 1 Church Portal 2025-04-09 N/A
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action.
CVE-2009-3081 1 Uiga 1 Church Portal 2025-04-09 N/A
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.