CVE-2005-3949: Undefined Security Weakness

Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...