Vulnerabilities

TI-2006-02706 CVE-2006-2798 · GHSA-x9wr-95h8-x3rx

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) LoName parameter in (a) week.php and (b) month.php and (2) Addre…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02235 Published 2006-06-03 No fix listed

TI-2006-02705 CVE-2006-2797 · GHSA-9738-q2f5-2hw5

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) CalendarDetailsID parameter in (a) month.php, (b) day.php, and (c) delCalendar.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02063 Published 2006-06-03 No fix listed

TI-2005-02730 CVE-2005-2882 · GHSA-w3rm-h2m6-8xr6

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01257 Published 2005-09-14 No fix listed

TI-2005-02729 CVE-2005-2881 · GHSA-7xxr-7x99-jpj2

phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain…

LOW 37

phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01843 Published 2005-09-14 No fix listed

TI-2005-02728 CVE-2005-2880 · GHSA-6phc-wxq6-x6fq

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly…

LOW 36

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01332 Published 2005-09-14 No fix listed