CVE-2005-3911

Published: Nov 30, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters.

Affected (1)

Products: Bosdev: Bosdates

Bosdev

1 product

Bosdates

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bosdev Bosdates	Version 4.0

References (10)

http://pridels0.blogspot.com/2005/11/bosdates-v40-sql-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17752

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21173

Source: cve@mitre.org

http://www.securityfocus.com/bid/15632

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2632

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/bosdates-v40-sql-vuln.html