CVE-2005-4009

Published: Dec 5, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, (c) month.php, and (d) year.php.

Affected (2)

Products: Php Lite: Calendar Express

Php Lite

1 product

Calendar Express

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Lite Calendar Express	Version 2.0
Php Lite Calendar Express	Version 2.2

References (8)

http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html

Source: cve@mitre.org

http://www.osvdb.org/21402

Source: cve@mitre.org

Exploit

http://www.osvdb.org/21403

Source: cve@mitre.org

Exploit

http://www.osvdb.org/21405

Source: cve@mitre.org

Exploit

http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21402

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/21403

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/21405

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.