CVE-2005-3911

The CVE-2005-3911 entry describes multiple SQL injection vulnerabilities in BosDates 4.0 and earlier , affecting calendar.php . The issue allows remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters) . Affected versions: BosDates 4.0 and earlier . Root ca...

CVE-2006-3957

The CVE-2006-3957 issue affects BosDev BosDates, specifically the payment.php component. The vulnerability is a remote file inclusion that allows an attacker to craft a URL in the insPath parameter to cause the application to execute arbitrary PHP code on the server. This is a server-side code ex...