high7.5Public exploit code
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ocean12 Calendar Manager 1.0 - Admin Form SQL Injection2005-04-20 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocean12 Technologies | Calendar Manager Pro | Version 1.01 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111401502007772&w=2
- http://secunia.com/advisories/15026
- http://www.securitytracker.com/alerts/2005/Apr/1013762.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20174
- http://marc.info/?l=bugtraq&m=111401502007772&w=2
- http://secunia.com/advisories/15026
- http://www.securitytracker.com/alerts/2005/Apr/1013762.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20174