high7.5
CVE-2004-1787
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Impact
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postnuke Software Foundation | Postcalendar | Version 4.0.0 |
References
- NVD record
- CVE.org record
- http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537
- http://secunia.com/advisories/10554
- http://securitytracker.com/id?1008621
- http://www.osvdb.org/3336
- http://www.securityfocus.com/bid/9372
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14111
- http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537
- http://secunia.com/advisories/10554
- http://securitytracker.com/id?1008621
- http://www.osvdb.org/3336
- http://www.securityfocus.com/bid/9372
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14111