CVE-2005-2881

phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory...

CVE-2005-2880

CVE-2005-2880 concerns multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 (and possibly earlier). The flaws allow remote attackers to execute arbitrary SQL commands via (1) the login field in login.php or (2) the LocationID parameter to week.php. The affected component is phpCom...

CVE-2005-2880

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the 1 login field in login.php or 2 LocationID parameter to week.php...

CVE-2005-2881

CVE-2005-2881 affects phpCommunityCalendar 4.0.3. Remote attackers can bypass authentication via a direct request to the admin directory. NVD CVSS v2 base score 7.5 (HIGH): NETWORK vector, low attack complexity, no authentication required; confidentiality, integrity, and availability are partiall...

CVE-2005-2882

The CVE-2005-2882 entry covers multiple XSS vulnerabilities in phpCommunityCalendar 4.0.3 (and possibly earlier). The affected components include LocationID-based injections in thankyou.php and day.php; font parameter in calDaily.php, calMonthly.php, calMonthlyP.php, calWeekly.php, calWeeklyP.php...

phpCommunityCalendar 4.0 - Multiple SQL Injections

phpCommunityCalendar 4.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/14763/info phpCommunityCalendar is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before being used in SQL queries. Successfu...

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14767/info phpCommunityCalendar is prone to multiple remote cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An...

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14767/info phpCommunityCalendar is prone to multiple remote cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...