Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-2444

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Calogic
Products
Calogic Calendars
CVE-2006-0180

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Calogic
Products
Calogic Calendars
CVE-2006-2570

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to (1) reconfig.php and (2) srxclr.php. NOTE: this might be due to a globals overwrite issue.

CVSS 2.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Calogic
Products
Calogic Calendars