4 matches found
CVE-2005-3911
The CVE-2005-3911 entry describes multiple SQL injection vulnerabilities in BosDates 4.0 and earlier , affecting calendar.php . The issue allows remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters) . Affected versions: BosDates 4.0 and earlier . Root ca...
CVE-2006-3957
The CVE-2006-3957 issue affects BosDev BosDates, specifically the payment.php component. The vulnerability is a remote file inclusion that allows an attacker to craft a URL in the insPath parameter to cause the application to execute arbitrary PHP code on the server. This is a server-side code ex...
CVE-2008-1211
CVE-2008-1211 describes a cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x. An attacker can inject arbitrary web script or HTML by supplying crafted input to (1) the type parameter in calendar.php or (2) the category parameter in calendar_search.php. The provided sources (NVD and ...