Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Calendarix Advanced 多个SQL注入漏洞
Vulnerability Description
Calendarix Advanced 1.5中存在多个SQL注入漏洞,远程攻击者可通过:(1)提交到cal_week.php脚本,(2)cal_cat.php脚本,或(3)到cal_day.php脚本的catview参数,或(4)到cal_pophols.php脚本的id参数,来执行任意SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A