CVE-2007-3183
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 4.5%
from disclosure to weaponsame day
Published on NVDJun 26
1st PoCJun 25
Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters to calendar.php and the (3) search string to cal_search.php.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30234⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://osvdb.org/35694http://secunia.com/advisories/25795http://securityreason.com/securityalert/2837https://exchange.xforce.ibmcloud.com/vulnerabilities/35046http://www.netvigilance.com/advisory0038http://www.osvdb.org/35373http://www.securityfocus.com/archive/1/472221/100/0/threadedhttp://www.securityfocus.com/bid/24633http://www.securitytracker.com/id?1018287http://www.vupen.com/english/advisories/2007/2324