CVE-2006-0252

Published: Jan 18, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day parameters.

Affected (1)

Products: Benders Calendar: Benders Calendar

Benders Calendar

1 product

Benders Calendar

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Benders Calendar Benders Calendar	version ≤ 1.0

References (16)

http://evuln.com/vulns/30/summary.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18462

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015491

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/22449

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/422052/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16242

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0190

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24120

Source: cve@mitre.org

http://evuln.com/vulns/30/summary.html