Vulnerabilities

TI-2008-02342 CVE-2008-2444 · GHSA-x85v-p72p-xjqj

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote…

LOW 35

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-05-27 No fix listed CWE-89

TI-2006-02501 CVE-2006-2570 · GHSA-qw5p-q588-qcq2

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote…

LOW 38

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to (1) reconfig.php and (2) srxclr.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02537 Published 2006-05-24 No fix listed

TI-2006-00172 CVE-2006-0180 · GHSA-gw99-hjhj-j3vj

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01374 Published 2006-01-12 No fix listed

TI-2005-02441 CVE-2005-2576 · GHSA-w623-fh3x-ffcc

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive…

LOW 26

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) doclsqlres.php, (2) clmcpreload.php, (3) viewhistlog.php, (4) mcconfig.php, (5) doclsqlbak.…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01325 Published 2005-08-16 No fix listed

TI-2005-02198 CVE-2005-2321 · GHSA-rpv7-r4h8-p47f

PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to…