Approved changes feed: RSS · Atom

cpe:2.3:a:vincent_hor:calendarix:0.6.2005-08-30:*:*:*:*:*:*:*

part: a version: 0.6.2005-08-30 update: *

VendorVincent Hor (38fc8254-14d2-54a5-b66a-3482bde58359)
ProductCalendarix (ca0eb446-f0ff-5e6d-8a2a-9b00bb0bd5ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1835 vulnerable 2026-06-08 04:48:58.177609 Details available
Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.
Published: 2006-04-19T16:00:00.000Z
Updated: 2024-08-07T17:27:29.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0492 vulnerable 2026-06-08 04:48:54.143385 Details available
Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via (1) the catview parameter in cal_functions.inc.php and (2) the login parameter in cal_login.php. NOTE: the catview vector might overlap CVE-2005-1865.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T16:34:14.893Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.