Lucene search
+L

4 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/28 12:00 a.m.•3 views

CVE-2006-6792: Undefined Security Weakness

SQL injection vulnerability in calendardetail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS6.5AI score0.01128EPSS
SaveExploits1References1
CVE
CVE
•added 2006/12/28 12:00 a.m.•52 views

CVE-2006-6792

CVE-2006-6792 affects Calendar MX BASIC 1.0.2 and earlier, with an SQL injection via the ID parameter in calendar_detail.asp. The vulnerability details provided indicate remote attackers could potentially manipulate SQL commands, aligned with a CVSS v2 base score of 7.5 (HIGH) and network access ...

7.5CVSS8.5AI score0.01128EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2006/05/09 11:00 p.m.•51 views

CVE-2006-2292

CVE-2006-2292 involves multiple SQL injection vulnerabilities in IA-Calendar. The affected components are the web interfaces calendar_new.asp (type parameter) and default.asp, and calendar_detail.asp (ID parameter). The underlying flaw allows remote attackers to craft input that could execute arb...

6.4CVSS8.2AI score0.01315EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/09 12:00 a.m.•2 views

CVE-2006-2292: Undefined Security Weakness

Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the 1 type parameter in a calendarnew.asp and b default.asp, and 2 ID parameter in c calendardetail.asp. NOTE: the provenance of this information is unknown; the details are obtained...

6.4CVSS6.4AI score0.01315EPSS
SaveExploits0References1
Rows per page
Query Builder