8.4 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, © month.php, and (d) year.php.
pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html
www.osvdb.org/21402
www.osvdb.org/21403
www.osvdb.org/21405