CVEvulnerability

CVE-2005-2880

7.5 HIGH Published 2005-09-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-09-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php.

Affected configurations

• phpcommunitycalendar phpcommunitycalendar 4.0 • phpcommunitycalendar phpcommunitycalendar 4.0.1 • phpcommunitycalendar phpcommunitycalendar 4.0.3

References

http://marc.info/?l=bugtraq&m=112605610624004&w=2 marc.info
http://rgod.altervista.org/phpccal.html Exploit, Vendor Advisory
http://secunia.com/advisories/16721/ Vendor Advisory
http://www.securityfocus.com/bid/14763 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22175 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=112605610624004&w=2 marc.info
http://rgod.altervista.org/phpccal.html Exploit, Vendor Advisory
http://secunia.com/advisories/16721/ Vendor Advisory
http://www.securityfocus.com/bid/14763 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22175 exchange.xforce.ibmcloud.com