EUVD-2005-3979

Malware in sbrugna...

CVE-2005-3984

CVE-2005-3984 affects WebCalendar 1.0.1 and is a SQL injection vulnerability exploitable via the time_range parameter to edit_report_handler.php. The issue is part of a set of vulnerabilities in WebCalendar (along with CVE-2005-3949) and is confirmed in multiple sources including NVD and Ubuntu, ...

CVE-2005-3984: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the timerange parameter to editreporthandler.php. NOTE: the startid/activitylog.php vector is already covered by CVE-2005-3949...