CVE-2004-1552

CVE-2004-1552 corresponds to a SQL injection vulnerability in aspWebCalendar. Attack surface: login page username field and calendar.asp eventid parameter. The underlying issue is unsafely constructed SQL queries that concatenate user input, allowing remote attackers to execute arbitrary SQL stat...