CVE-2005-1866

CVE-2005-1866 affects Calendarix Advanced

CVE-2005-1864

Calendarix Advanced

CVE-2005-1865

CVE-2005-1865 describes multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 . Remote attackers can cause arbitrary SQL execution via the following inputs: (1) catview parameter to cal_week.php , (2) cat_view to cal_cat.php , (3) cal_day.php, or (4) id parameter to cal_pophols.php . ...

PT-2005-2822 · Calendarix · Calendarix Advanced

Name of the Vulnerable Software and Affected Versions: Calendarix Advanced version 1.5 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the catview parameter to API endpoints such as "/cal week.php", "/cal cat.php", or "/cal day.php", or t...

Calendarix Multiple Vulnerabilities (SQLi, XSS)

The remote host is running Calendarix, a PHP-based calendar system. The remote version of this software is prone to a remote file include vulnerability as well as multiple cross-site scripting, and SQL injection vulnerabilities. Successful exploitation could result in execution of arbitrary PHP...

multiple vulnerability Calendarix Advanced

/ Advisorie : 01-0005-15 title: multiple vulnerability Software: Calendarix Advanced Date: 28. April 2005 Web: http://www.calendarix.com/ / - Affected software description: Webcalendar is a web software write in php y mysql - Expoit: Include line 16 admin/caladmintop.php:includeonce...

CVE-2005-1866

Cross-site scripting XSS vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter...

Calendarix 0.8.20071118 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

Calendarix 0.8.20071118 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13825/info Calendarix is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize...