EUVD-2008-2439

Malware in sbrugna...

Sql injection

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter...

CVE-2008-2444

CVE-2008-2444 concerns SQL injection in CaLogic Calendars 1.2.2. The vulnerability resides in userreg.php via the langsel parameter, allowing remote attackers to execute arbitrary SQL commands. Metrics indicate a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no authent...

CVE-2008-2444

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter...