Approved changes feed: RSS · Atom

cpe:2.3:a:calogic:calogic_calendars:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorCalogic (f84d2ff2-0db5-5257-85fb-044dad003d04)
ProductCalogic Calendars (113d69dd-4381-5db2-8b4c-09b552b6a71d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2444 vulnerable 2026-06-08 04:50:24.095210 Details available
SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter.
Published: 2008-05-27T14:00:00.000Z
Updated: 2024-08-07T08:58:02.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2570 vulnerable 2026-06-08 04:49:07.086808 Details available
PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to (1) reconfig.php and (2) srxclr.php. NOTE: this might be due to a globals overwrite issue.
Published: 2006-05-24T23:00:00.000Z
Updated: 2024-08-07T17:58:50.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0180 vulnerable 2026-06-08 04:48:46.126047 Details available
Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags.
Published: 2006-01-12T11:00:00.000Z
Updated: 2024-08-07T16:25:34.102Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.