CVE-2007-3627
PHP Lite Calendar Express 2.2 - SQL Injection via cid Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-3627. PoCs published by almaster.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Calendar Express, where the 'cid' parameter in subscribe.php is not properly sanitized. It includes a basic example URL but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to (1) login.php, (2) auth.php, and (3) subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (3)
The provided text describes a SQL injection vulnerability in Calendar Express, where the 'cid' parameter in subscribe.php is not properly sanitized. It includes a basic example URL but lacks executable exploit code.
The provided content describes a SQL injection vulnerability in Calendar Express, where the 'cid' parameter in login.php is not properly sanitized. It includes a basic example URL but lacks executable exploit code.
The provided code is a writeup describing a SQL injection vulnerability in Calendar Express. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.