CVE

Id
19198  
CVE No.
CVE-2006-3094  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) cal_event.php and (2) cal_popup.php.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171441 19198 CVE-2006-3094 BUGTRAQ:20060615 Calendarix 0.7.20060401, SQL Injection Vulnerabilities  View
171442 19198 CVE-2006-3094 URL:http://marc.info/?l=bugtraq&m=115048898305454&w=2  View
171443 19198 CVE-2006-3094 VUPEN:ADV-2006-2360  View
171444 19198 CVE-2006-3094 URL:http://www.vupen.com/english/advisories/2006/2360  View
171445 19198 CVE-2006-3094 OSVDB:26528  View
171446 19198 CVE-2006-3094 URL:http://www.osvdb.org/26528  View
171447 19198 CVE-2006-3094 OSVDB:26529  View
171448 19198 CVE-2006-3094 URL:http://www.osvdb.org/26529  View
171449 19198 CVE-2006-3094 SECTRACK:1016324  View
171450 19198 CVE-2006-3094 URL:http://securitytracker.com/id?1016324  View
171451 19198 CVE-2006-3094 SECUNIA:20645  View
171452 19198 CVE-2006-3094 URL:http://secunia.com/advisories/20645  View
171453 19198 CVE-2006-3094 XF:calendarix-id-sql-injection(27186)  View

Related JVN