CVE:CVE-2023-0675
CNNVD:CNNVD-202302-321
Event Management System是一个事件管理系统。
Calendar Event Management System 2.3.0版本存在SQL注入漏洞，攻击者利用该漏洞可以通过参数start/end可以进行SQL注入。
solution:Upgrade calendar_event_management_system_project calendar_event_management_system to a higher version than 2.3.0,and avoid the version 2.3.0