Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) $total_login and (2) $total_password parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Magic_calendar_lite | Reamday_enterprises | 1.02 (including) | 1.02 (including) |