CVE-2009-2243

The CVE-2009-2243 vulnerability affects the ASP Inline Corporate Calendar, specifically the active_appointments.asp component. The root cause is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the sortby parameter. This could lead to data exposure...

CVE-2009-2242

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2242

The CVE-2009-2242 entry describes a SQL injection vulnerability in active_appointments.asp of the ASP Inline Corporate Calendar. The flaw allows remote attackers to inject arbitrary SQL commands via the order parameter, potentially compromising the underlying database. The vulnerability is docume...