CVEvulnerability
CVE-2005-4009
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, (c) month.php, and (d) year.php.
Affected configurations
• php lite calendar express 2.0
• php lite calendar express 2.2
References
- http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html pridels0.blogspot.com
- http://www.osvdb.org/21402 Exploit
- http://www.osvdb.org/21403 Exploit
- http://www.osvdb.org/21405 Exploit
- http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html pridels0.blogspot.com
- http://www.osvdb.org/21402 Exploit
- http://www.osvdb.org/21403 Exploit
- http://www.osvdb.org/21405 Exploit