5.1
CVSSv2

CVE-2006-3094

Published: 19/06/2006 Updated: 20/07/2017
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 454
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and previous versions, with magic_quotes_gpc disabled, allow remote malicious users to execute arbitrary SQL commands via the id parameter in (1) cal_event.php and (2) cal_popup.php.

Vulnerable Product Search on Vulmon Subscribe to Product

vincent hor calendarix basic