CVE-2008-5737

CVE-2008-5737 is a SQL injection vulnerability affecting Nodstrum MySQL Calendar (versions 1.1 and 1.2). The flaw occurs in index.php where the username parameter can be manipulated to execute arbitrary SQL commands, enabling an attacker to access or modify data. The CVSSv2 base score is 7.5 (Hig...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 can be exploited by remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. This is the explicit vulnerability described in the CVE-2008-5738 records (NVD) with a high impact score; no remediation ...