Summary
The remote installation of WebCalendar may allow an attacker to cause an SQL Injection vulnerability in the program allowing an attacker to cause the program to execute arbitrary SQL statements.
Severity
Classification
-
CVE CVE-2004-1506, CVE-2004-1507, CVE-2004-1508, CVE-2004-1509, CVE-2004-1510 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- 'research_display.php' SQL Injection Vulnerability
- ALCASAR Remote Code Execution Vulnerability
- ActualAnalyzer Lite 'ant' Cookie Parameter Remote Command Execution Vulnerability
- AlstraSoft AskMe Pro 'forum_answer.php' and 'profile.php' Multiple SQL Injection Vulnerabilities
- Apache Tomcat /servlet Cross Site Scripting