← back
CVE-2007-6158

CVE-2007-6158

EPSS 1.0%
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://securityreason.com/securityalert/3401https://exchange.xforce.ibmcloud.com/vulnerabilities/38628http://www.securityfocus.com/archive/1/484193/100/0/threadedhttp://www.securityfocus.com/bid/26584