SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Teca_diary | Teca_scripts | personal_1.0 (including) | personal_1.0 (including) |