CVE-2006-2973

CVE-2006-2973 involves multiple SQL injection vulnerabilities in month.php of PHP Lite Calendar Express 2.2 . The issue allows remote attackers to execute arbitrary SQL commands via the (1) and (2) parameters, potentially affecting the application’s database through the affected page. The CVSS ...