VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 20, 2023· Updated Jun 17, 2026

CVE-2023-46700

CVE-2023-46700

Description

SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary SQL command by sending a crafted request, and obtain or alter information stored in the database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Luxsoft/The Luxcal Web Calendarcpe-rescue2 versions
    prior to 5.2.4L (SQLite version)+ 1 more
    • (no CPE)range: prior to 5.2.4L (SQLite version)
    • (no CPE)range: <5.2.4M (MySQL), <5.2.4L (SQLite)
  • Luxsoft/Luxcal Web Calendar2 versions
    cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:sqlite:*:*:*+ 1 more
    • cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:sqlite:*:*:*range: <5.2.4l
    • cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:mysql:*:*:*range: <5.2.4m
  • LuxCal/LuxCal Web Calendarllm-fuzzy
    Range: <5.2.4M (MySQL), <5.2.4L (SQLite)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.