CVE-2007-1813: Inconnueteam Ecal

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the katid parameter.

Affected products

• Inconnueteam Ecal: version 2.24 only

Published 2007-04-02. Last modified 2026-06-16.