NVD

Id
69587  
Name
CVE-2005-3949  
Description
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_template.php, and (4) multiple parameters to export_handler.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-01  
Modified Date
2011-03-07  
Seq
2005-3949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359698 69587 CVE-2005-3949 215  View
359699 69587 CVE-2005-3949 http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587  View
359700 69587 CVE-2005-3949 DSA-1002  View
359701 69587 CVE-2005-3949 20051128 WebCalendar Multiple Vulnerabilities  View
359702 69587 CVE-2005-3949 20051201 WebCalendar Multiple Vulnerabilities.  View
359703 69587 CVE-2005-3949 15606  View
359704 69587 CVE-2005-3949 15608  View
359705 69587 CVE-2005-3949 15662  View
359706 69587 CVE-2005-3949 http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities  View
359707 69587 CVE-2005-3949 ADV-2005-2643  View
359708 69587 CVE-2005-3949 webcalendar-multiple-scripts-sql-injection(23369)  View

Related JVN