CVEvulnerability
CVE-2006-0252
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day parameters.
Affected configurations
• benders calendar benders calendar (<= 1.0)
References
- http://evuln.com/vulns/30/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18462 Vendor Advisory
- http://securitytracker.com/id?1015491 Exploit, Vendor Advisory
- http://www.osvdb.org/22449 www.osvdb.org
- http://www.securityfocus.com/archive/1/422052/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16242 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0190 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24120 exchange.xforce.ibmcloud.com
- http://evuln.com/vulns/30/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18462 Vendor Advisory
- http://securitytracker.com/id?1015491 Exploit, Vendor Advisory
- http://www.osvdb.org/22449 www.osvdb.org
- http://www.securityfocus.com/archive/1/422052/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16242 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0190 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24120 exchange.xforce.ibmcloud.com