CVE-2006-3684

The CVE-2006-3684 issue affects SoftComplex PHP Event Calendar 1.4, where a PHP remote file inclusion vulnerability exists in calendar.php. An attacker can provide a URL in the path_to_calendar parameter, which is processed by an extract() call and overwrites the $path_to_calendar variable, enabl...

CVE-2006-0657

CVE-2006-0657 affects Softcomplex’s PHP Event Calendar 1.5. The issue is a vulnerability in the usernames/passwords handling, where inputs are written to users.php without sanitization, enabling potential cross‑site scripting (XSS) or direct static code injection that could corrupt data. Descript...

CVE-2006-4825

CVE-2006-4825 concerns multiple cross-site scripting (XSS) vulnerabilities in SoftComplex PHP Event Calendar 1.5.1 (and possibly earlier) where remote attackers can inject arbitrary script/HTML via the parameters ti, bi, or cbgi in cl_files/index.php. The connected documents reiterate the same de...