Vendor/product archive

codewalkers / ltwcalendar CVEs

Beta · best-effort

4 CVEs tagged to codewalkers / ltwcalendar — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to codewalkers vendor archive

CVE-2006-6228

Published Dec 2, 2006

Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknow…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-6229

Published Dec 2, 2006

Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-3041

Published Jun 15, 2006

PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ltw_con…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-4011

Published Dec 5, 2005

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands v…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1