Security Advisory

CVE-2025-25221

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-18 00:10:25
Last updated 2025-02-18 15:24:46
Assigner jpcert
State PUBLISHED

Description

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.