SQL Injection Vulnerability in Benders Calendar by Benders
CVE-2006-0252

Currently unrated

Key Information:

Vendor: Benders Calendar
Status: Benders Calendar
Vendor: CVE Published:; 18 January 2006

🔔 Create Benders Calendar Vulnerability Alert

What is CVE-2006-0252?

The Benders Calendar 1.0 is subject to an SQL injection vulnerability that enables remote attackers to execute arbitrary SQL commands through multiple parameters, including year, month, and day. This flaw allows attackers to manipulate the database in potentially harmful ways, compromising the security and integrity of the application.

References

http://secunia.com/advisories/18462

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/archive/1/422052/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://www.osvdb.org/22449

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 18, 2006
Vulnerability Reserved
Jan 18, 2006

CVE-2006-0252 Data

JSON