high7.5Public exploit code
CVE-2003-0735
SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Website 0.7.3/0.8.2/0.8.3/0.9.2 Calendar Module - SQL Injection2003-08-11 · webapps · php · Verified
Impact
SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpwebsite | Phpwebsite | through 0.9.0 |