CVE-2004-1552

EPSS 4.1%

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/3546unverified exploitdbwww.exploit-db.com/exploits/7242unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=109604910025090&w=2 http://secunia.com/advisories/12651 http://secunia.com/advisories/24622 https://exchange.xforce.ibmcloud.com/vulnerabilities/17506 https://exchange.xforce.ibmcloud.com/vulnerabilities/33157 https://www.exploit-db.com/exploits/3546 http://www.securityfocus.com/bid/11246 http://www.securityfocus.com/bid/23098 http://www.vupen.com/english/advisories/2007/1093