CVE-2008-2429

Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...

Calendarix Basic cal_cat.php catview Parameter SQL Injection

The remote host is running Calendarix, a free, web-based calendar application written in PHP. The installed version of Calendarix does not validate user-supplied input to the 'catview ' parameter of the 'calcat.php' script before using it in database queries. Regardless of PHP's 'magicquotesgpc'...

CVE-2005-1865

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...