TI-2012-03621 CVE-2012-4240 · GHSA-7gpq-4vwj-j795SQL injection vulnerability in modules/calendar/json.php in Group-Office community before…Priority LOW 31SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01247 · Published 2014-09-11 · No fix listed CWE-89