CVE-2008-2429
Calendarix Basic 0.8.20071118 - SQL Injection via catsearch or catview Parameter
Title source: llmDescription
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via (1) the catsearch parameter to cal_search.php or (2) the catview parameter to cal_cat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap CVE-2005-1865.2.
References (2)
Core 2
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30710
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2008-28/advisory/
Scores
EPSS
0.0100
EPSS Percentile
59.3%
Details
CWE
CWE-89
Status
published
Products (1)
calendarix/basic
0.8.20071118
Published
Nov 26, 2008
Tracked Since
Feb 18, 2026