CVE-2009-2242

The CVE-2009-2242 entry describes a SQL injection vulnerability in active_appointments.asp of the ASP Inline Corporate Calendar. The flaw allows remote attackers to inject arbitrary SQL commands via the order parameter, potentially compromising the underlying database. The vulnerability is docume...

CVE-2009-2242

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2243

The CVE-2009-2243 vulnerability affects the ASP Inline Corporate Calendar, specifically the active_appointments.asp component. The root cause is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the sortby parameter. This could lead to data exposure...

CVE-2009-2242: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2243: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...