CVE-2006-1372

Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) EventID parameter in viewEvent.cfm, (2) NewsID parameter in newsView.cfm, or (3) ThisDate parameter in mainCal.cfm.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.78% chance of exploitation in the next 30 days, 78th percentile

Published

2006-03-24

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/27457
• https://www.exploit-db.com/exploits/27456
• https://www.exploit-db.com/exploits/27455

Security advisories

• http://www.securityfocus.com/bid/17193

References

• CVE Record
• NVD entry