TROYANOSYVIRUS
Back to CVEs

CVE-2006-0610

N/A

Description

Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the fm_data[id] parameter to calendar.php and (2) the $ad['acc'] variable in adminlogin.php.

CVE Details

CVSS v3.1 ScoreN/A
Published2/9/2006
Last Modified4/16/2026
Sourcenvd
Honeypot Sightings0

Affected Products

2200net:2200net_calendar

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.