CVE-2005-4011

Description

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27362

https://exchange.xforce.ibmcloud.com/vulnerabilities/23312

http://www.vupen.com/english/advisories/2005/2652

http://www.securityfocus.com/bid/18593

http://www.securityfocus.com/bid/15636

http://www.securityfocus.com/archive/1/438580/100/0/threaded

http://www.securityfocus.com/archive/1/438232/100/0/threaded

http://www.osvdb.org/27539

http://www.osvdb.org/21195

http://www.attrition.org/pipermail/vim/2006-December/001154.html

http://www.Silitix.com/calendar-cws.php

http://securitytracker.com/id?1016364

http://secunia.com/advisories/17799

http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html

http://ltwcalendar.sourceforge.net/changelog.php

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS