SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/14111http://www.securityfocus.com/bid/9372http://secunia.com/advisories/10554http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537http://securitytracker.com/id?1008621http://www.osvdb.org/3336