WebCalendar version 0.1.0 is susceptible to SQL injection attacks via activity_log.php and edit_report_handler.php. layers_toggle.php is susceptible to CRLF injection. Exploitation details provided.
a301911fe8f5e2b56d3446fb741963f4c821df654703f5e31403ffbb7cebdaef