SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Teca_diary | Teca_scripts | personal_1.0 (including) | personal_1.0 (including) |