CVE-2006-1372
1WebCalendar < 4.0 - SQL Injection via EventID, NewsID, or ThisDate Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-1372. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in WebCalendar due to improper input sanitization. It references a generic exploit URL but lacks actual exploit code or technical details.
Description
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) EventID parameter in viewEvent.cfm, (2) NewsID parameter in newsView.cfm, or (3) ThisDate parameter in mainCal.cfm.
Exploits (3)
The provided text describes SQL injection vulnerabilities in WebCalendar due to improper input sanitization. It references a generic exploit URL but lacks actual exploit code or technical details.
The provided text describes SQL injection vulnerabilities in WebCalendar but lacks actual exploit code. It references a generic URL pattern for exploitation without technical details or payloads.
The provided text describes a SQL injection vulnerability in WebCalendar but does not include actual exploit code. It references a SecurityFocus BID and a generic example URL without technical details or payloads.