Unscored CVE-2005-1481 EUVD-2005-1484GHSA-r7cc-mwc5-hwrx

Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL comma…

Published May 11, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID parameter to (1) defer.asp or (2) details.asp.

References

1013884 vdb-entry
16192 vdb-entry
16193 vdb-entry
15239 third-party-advisory
asp-inline-corporate-calendar-sql-injection(20416) vdb-entry
20050503 [HSC Security Group] ASP Inline Corporate Calendar SQL injection mailing-list