CVE:CVE-2023-0663
CNNVD:CNNVD-202302-298
Event Management System是一个事件管理系统。
Calendar Event Management System 2.3.0版本存在SQL注入漏洞，该漏洞源于组件Login Page存在某些未知处理，参数name/pwd 导致SQL注入。
solution:Upgrade calendar_event_management_system_project calendar_event_management_system to a higher version than 2.3.0,and avoid the version 2.3.0