CVEvulnerability
CVE-2007-6158
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.
Affected configurations
• proverbs proverbs web calendar 1.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/3401 securityreason.com
- http://www.securityfocus.com/archive/1/484193/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26584 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38628 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/3401 securityreason.com
- http://www.securityfocus.com/archive/1/484193/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26584 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38628 exchange.xforce.ibmcloud.com