CVE-2004-0275 SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
MediumCVSS 5.0
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bosdev bosdates | = 3.0 | No fix listed |
| bosdev bosdates | = 3.1 | No fix listed |
| bosdev bosdates | = 3.2 | No fix listed |
References
- 20040211 ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates mailing-list
- 9639 exploit vdb-entry vendor-advisory
- www.zone-h.org
- bosdates-calendar-sql-injection(15133) vdb-entry