Unscored CVE-2006-5977 EUVD-2006-5960GHSA-m8fr-3v28-4g59

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the (1) M or (2) Y pa…

Published Nov 20, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the (1) M or (2) Y parameter to rss_out.asp, or the (3) cate parameter to all_calendars.asp. NOTE: the all_calendars.asp/calsids vector is already covered by CVE-2006-2293.

References

1883 third-party-advisory
multicalendars-rssout-allcal-sql-injection(30301) vdb-entry
20061115 MultiCalendars [ multiples injection sql ] mailing-list