CVE-2006-2973 Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) catid and (2) cid parameter. NOTE: this might....
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) catid and (2) cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php lite calendar express | = 2.2 | No fix listed |
References
- 1089 third-party-advisory
- 20060607 Calendar Express 2 SQL injection mailing-list
- 18314 exploit vdb-entry
- ADV-2006-2220 vdb-entry vendor-advisory