CVE-2007-3259: Undefined Security Weakness

Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via 1 an invalid month parameter to calendar.php, 2 an invalid catview parameter to calweek.php in a week operation, 3 an invalid ycyear parameter to yearcal.php, or 4 a direct request to calfunctions.inc.php, which...

CVE-2006-0492: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...