Vulnerabilities

TI-2008-02342 CVE-2008-2444 · GHSA-x85v-p72p-xjqj

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote…

LOW 35

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-05-27 No fix listed CWE-89

TI-2006-02501 CVE-2006-2570 · GHSA-qw5p-q588-qcq2

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote…

LOW 38

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to (1) reconfig.php and (2) srxclr.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02537 Published 2006-05-24 No fix listed

TI-2006-00172 CVE-2006-0180 · GHSA-gw99-hjhj-j3vj

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01374 Published 2006-01-12 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote…

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote…

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote…