CVE-2008-3452: Endonesia Calendar Module

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter in a list_events action to mod.php.

Affected products

• Endonesia Calendar Module: version 8.4 only
• Endonesia Endonesia: version 8.4 only

Published 2008-08-04. Last modified 2026-06-16.