CVE-2007-6158

Proverbs Web Calendar 1.1 and earlier have multiple SQL injection vulnerabilities in caladmin.inc.php that allow remote attackers to execute arbitrary SQL commands via loginname (Username) and loginpass (Password) parameters to caladmin.php. Affected component is caladmin.inc.php; vulnerability d...

CVE-2007-6158: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 loginname aka Username and 2 loginpass aka Password parameters to caladmin.php...