CVE-2003-0735
phpwebsite < 0.9.0 - SQL Injection via Calendar Module Year Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0735. PoCs published by Lorenzo Hernandez Garcia-Hierro.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in PHP Website's calendar module. It includes example URLs demonstrating how malicious input can be injected into the 'year' and 'month' parameters to manipulate SQL queries.
Description
SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter.
Exploits (1)
The provided text describes SQL injection vulnerabilities in PHP Website's calendar module. It includes example URLs demonstrating how malicious input can be injected into the 'year' and 'month' parameters to manipulate SQL queries.