CVE-2005-3949
Published: 1 December 2005
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_template.php, and (4) multiple parameters to export_handler.php.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
webcalendar Launchpad, Ubuntu, Debian |
dapper |
Released
(1.0.2-2.1)
|
| edgy |
Released
(1.0.2-2.1)
|
|
| feisty |
Does not exist
|
|
| upstream |
Needs triage
|