Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-1835

Disclosure Date: April 19, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.
0
0
Attacker Value
Unknown

CVE-2005-1865

Disclosure Date: June 09, 2005 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.
0
0
Attacker Value
Unknown

CVE-2005-1864

Disclosure Date: June 09, 2005 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
0
0
Attacker Value
Unknown

CVE-2005-1866

Disclosure Date: May 31, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
0
0