Approved changes feed: RSS · Atom

cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLuxsoft (3c7702d7-a4ac-5fe5-b1b9-adc230d14a1d)
ProductLuxcal Web Calendar (e7f37221-570e-52b8-87f3-8b5cd04ee151)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47175 vulnerable 2026-06-08 06:14:24.170759 Details available
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.
Published: 2023-11-20T04:47:17.899Z
Updated: 2024-08-29T13:42:55.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46700 vulnerable 2026-06-08 06:14:22.821869 Details available
SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary SQL command by sending a crafted request, and obtain or alter information stored in the database.
Published: 2023-11-20T04:47:07.850Z
Updated: 2024-08-29T13:44:41.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39939 vulnerable 2026-06-08 06:09:38.136703 Details available
SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it.
Published: 2023-08-21T08:14:23.575Z
Updated: 2024-10-04T17:53:12.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39543 vulnerable 2026-06-08 06:09:37.684763 Details available
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product.
Published: 2023-08-21T08:14:05.711Z
Updated: 2024-10-04T17:54:52.825Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.