Vulnerabilities > CVE-2004-0275 - SQL Injection vulnerability in Bosdev Bosdates 3.0/3.1/3.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
bosdev
exploit available
NVD
Published: 2004-11-23
Updated: 2017-07-11

Summary

SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.

Vulnerable Configurations

Part Description Count
Application
Bosdev
3

Exploit-Db

descriptionBosDev BosDates 3.x SQL Injection Vulnerability. CVE-2004-0275. Webapps exploit for php platform
idEDB-ID:23685
last seen2016-02-02
modified2004-02-11
published2004-02-11
reporterG00db0y
sourcehttps://www.exploit-db.com/download/23685/
titleBosDev BosDates 3.x SQL Injection Vulnerability

References