CVE-2004-1552

2005-02-2005:00:00

mitre

www.cve.org

8.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.3%

JSON

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.

References

marc.info/?l=bugtraq&m=109604910025090&w=2

secunia.com/advisories/12651

secunia.com/advisories/24622

www.securityfocus.com/bid/11246

www.securityfocus.com/bid/23098

www.vupen.com/english/advisories/2007/1093

exchange.xforce.ibmcloud.com/vulnerabilities/17506

exchange.xforce.ibmcloud.com/vulnerabilities/33157

www.exploit-db.com/exploits/3546