Approved changes feed: RSS · Atom

cpe:2.3:a:vincent_hor:calendarix_advanced:1.5:*:*:*:*:*:*:*

part: a version: 1.5 update: *

VendorVincent Hor (38fc8254-14d2-54a5-b66a-3482bde58359)
ProductCalendarix Advanced (771795c1-3a63-5040-8748-8847d934e2cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-1866 vulnerable 2026-06-08 04:48:27.697969 Details available
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
Published: 2005-06-07T04:00:00.000Z
Updated: 2024-09-16T17:49:24.720Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1865 vulnerable 2026-06-08 04:48:27.697692 Details available
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.
Published: 2005-06-07T04:00:00.000Z
Updated: 2024-08-07T22:06:57.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1864 vulnerable 2026-06-08 04:48:27.697294 Details available
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
Published: 2005-06-07T04:00:00.000Z
Updated: 2024-08-07T22:06:57.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.