7.5
CVSSv2

CVE-2005-1865

Published: 09/06/2005 Updated: 14/02/2024
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote malicious users to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.

Vulnerable Product Search on Vulmon Subscribe to Product

vincent hor calendarix advanced 1.5