PT-2006-3946 · Codewalkers · Ltwcalendar

Name of the Vulnerable Software and Affected Versions: Codewalkers Ltwcalendar version 4.1.3 Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the ltw configinclude dir parameter in the Ltwcalendar/calendar.php file. However, it is noted that th...

CVE-2006-3041: Undefined Security Weakness

PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ltwconfigincludedir parameter. NOTE: CVE disputes this claim, since the $ltwconfigincludedir variable is defined as a static...

CVE-2005-4011

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar aka PHP Event Calendar 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4011

The CVE-2005-4011 vulnerability affects Codewalkers ltwCalendar (aka PHP Event Calendar) and involves a SQL injection in calendar.php via the id parameter. Affected versions are 4.2, 4.1.3 and earlier. The underlying issue is improper input handling that allows remote attackers to execute arbitra...

CVE-2005-4011

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar aka PHP Event Calendar 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Codewalkers ltwCalendar 4.x SQL inj. vuln

Codewalkers ltwCalendar 4.x SQL inj. vuln Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html Vendor:http://calendar.codewalkers.com/ affected version: v4.1.3 and prior Product Description: ltwCalendar is an even...