← back
CVE-2006-0835

CVE-2006-0835

EPSS 1.3%
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service (inaccessible database) via the tabls parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27298unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.htmlhttp://secunia.com/advisories/18902https://exchange.xforce.ibmcloud.com/vulnerabilities/24729http://www.securityfocus.com/bid/16789http://www.vupen.com/english/advisories/2006/0700http://www.xorcrew.net/xpa/XPA-WebCalendarPro.txt