CVE-2007-2621 - SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execu

CVE-2007-2621

Summary

SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter.

References

Vulnerable Configurations

cpe:2.3:a:extrovert_software:thyme_calndar:1.3:*:*:*:*:*:*:*
cpe:2.3:a:extrovert_software:thyme_calndar:1.3:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	23912
exploit-db	3895
osvdb	35971
secunia	25234
vupen	ADV-2007-1771
xf	thyme-eventview-sql-injection(34211)

Last major update

11-10-2017 - 01:32

Published

11-05-2007 - 16:19

Last modified

11-10-2017 - 01:32