CVE-2004-1552
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.4%
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| full_revolution:aspwebcalendar | full revolution aspwebcalendar | eq | 4.5 |
References
marc.info/?l=bugtraq&m=109604910025090&w=2
secunia.com/advisories/12651
secunia.com/advisories/24622
www.securityfocus.com/bid/11246
www.securityfocus.com/bid/23098
www.vupen.com/english/advisories/2007/1093
exchange.xforce.ibmcloud.com/vulnerabilities/17506
exchange.xforce.ibmcloud.com/vulnerabilities/33157
www.exploit-db.com/exploits/3546
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.4%