Luxcal Web Calendar
Approved changes feed: RSS · Atom
cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:sqlite:*:*:*:*:*
part: a version: * update: *
| Vendor | Luxsoft (3c7702d7-a4ac-5fe5-b1b9-adc230d14a1d) |
|---|---|
| Product | Luxcal Web Calendar (e7f37221-570e-52b8-87f3-8b5cd04ee151) |
| Edition | sqlite |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25224 |
vulnerable | 2026-06-08 07:12:50.858990 |
Details available
MEDIUM (5.3)
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
Published: 2025-02-18T00:12:21.912Z
Updated: 2025-02-18T19:29:03.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25223 |
vulnerable | 2026-06-08 07:12:50.858555 |
Details available
MEDIUM (5.8)
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
Published: 2025-02-18T00:11:36.413Z
Updated: 2025-02-18T19:29:16.869Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25222 |
vulnerable | 2026-06-08 07:12:50.858042 |
Details available
HIGH (7.3)
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
Published: 2025-02-18T00:11:03.172Z
Updated: 2025-02-18T19:29:28.127Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25221 |
vulnerable | 2026-06-08 07:12:50.856635 |
Details available
HIGH (7.3)
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
Published: 2025-02-18T00:10:25.747Z
Updated: 2025-02-18T15:24:46.624Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.