CVE-2004-1552

Description

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.

References

https://www.exploit-db.com/exploits/3546

https://exchange.xforce.ibmcloud.com/vulnerabilities/33157

https://exchange.xforce.ibmcloud.com/vulnerabilities/17506

http://www.vupen.com/english/advisories/2007/1093

http://www.securityfocus.com/bid/23098

http://secunia.com/advisories/24622

http://secunia.com/advisories/12651

http://marc.info/?l=bugtraq&m=109604910025090&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3