← Volver a CVEs
CVE-2005-2880
N/ADescripcion
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado9/14/2005
Ultima modificacion4/16/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
phpcommunitycalendar:phpcommunitycalendar
Referencias
http://marc.info/?l=bugtraq&m=112605610624004&w=2(cve@mitre.org)
http://rgod.altervista.org/phpccal.html(cve@mitre.org)
http://secunia.com/advisories/16721/(cve@mitre.org)
http://www.securityfocus.com/bid/14763(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/22175(cve@mitre.org)
http://marc.info/?l=bugtraq&m=112605610624004&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://rgod.altervista.org/phpccal.html(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/16721/(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/14763(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/22175(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.