PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
Search vulnerabilities
CVE-2005-1864
CVSS 2.0 · 5.0 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products
CVE-2005-1865
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.
CVSS 2.0 · 7.5 High
EPSS 1.9%
KEV · Not listed
Vendors
Products
CVE-2005-1866
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
CVSS 2.0 · 4.3 Medium
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2006-1835
Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.
CVSS 2.0 · 2.6 Low
EPSS 2.1%
KEV · Not listed
Vendors
Products
Page 1 of 1.