CVE-2006-1372

Published: Mar 24, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) EventID parameter in viewEvent.cfm, (2) NewsID parameter in newsView.cfm, or (3) ThisDate parameter in mainCal.cfm.

Affected (1)

Products: Benson It Solutions: 1webcalendar

Benson It Solutions

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Benson It Solutions 1webcalendar	version ≤ 4.0

References (16)

http://pridels0.blogspot.com/2006/03/1webcalendar-v-4x-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19329

Source: cve@mitre.org

Exploit

http://www.osvdb.org/24021

Source: cve@mitre.org

http://www.osvdb.org/24022

Source: cve@mitre.org

http://www.osvdb.org/24023

Source: cve@mitre.org

http://www.securityfocus.com/bid/17193

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1040

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25373

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/03/1webcalendar-v-4x-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19329

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/24021

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24022

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24023

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17193

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1040

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25373

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.