Description
SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day parameters.
References
- 18462 third-party-advisory
- 20060115 [eVuln] Benders Calendar SQL Injection mailing-list
- 22449 vdb-entry
- 1015491 vdb-entry
- ADV-2006-0190 vdb-entry
- 16242 vdb-entry
- benderscalendar-sql-injection(24120) vdb-entry
- http://evuln.com/vulns/30/summary.html