Vulnerabilities > CVE-2006-1422 - SQL Injection vulnerability in Jjwwebdesign PHPbookingcalendar 1.0C

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
jjwwebdesign
exploit available
NVD
Published: 2006-03-28
Updated: 2017-10-11

Summary

SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the event_id parameter.

Vulnerable Configurations

Part Description Count
Application
Jjwwebdesign
1

Exploit-Db

  • descriptionphpBookingCalendar <= 1.0c [details_view.php] Remote SQL Injection. CVE-2006-1422. Webapps exploit for php platform
    fileexploits/php/webapps/1610.txt
    idEDB-ID:1610
    last seen2016-01-31
    modified2006-03-25
    platformphp
    port
    published2006-03-25
    reporterundefined1_
    sourcehttps://www.exploit-db.com/download/1610/
    titlephpBookingCalendar <= 1.0c - details_view.php Remote SQL Injection
    typewebapps
  • descriptionPHP Booking Calendar 10 d Remote SQL Injection Exploit. CVE-2006-1422. Webapps exploit for php platform
    idEDB-ID:5696
    last seen2016-01-31
    modified2008-05-29
    published2008-05-29
    reporterStack
    sourcehttps://www.exploit-db.com/download/5696/
    titlePHP Booking Calendar 10 d Remote SQL Injection Exploit

References