miniCal vulnerabilities
We track 2 vulnerabilities in miniCal products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2023.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest miniCal vulnerabilities
- 8.8 High severity
miniCal: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/show_bookings/. The manipulation of the argument search_query leads to sql injection. The attack may be initiated remotel
- 8.8 High severity
Minical: Improper Neutralization of Formula Elements in a CSV File
Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV