Vulnerabilities > Codewalkers

DATE CVE VULNERABILITY TITLE RISK
2006-12-02 CVE-2006-6229 Remote Security vulnerability in Codewalkers Ltwcalendar 4.1.3/4.2
Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file.
network
low complexity
codewalkers
5.0
2006-12-02 CVE-2006-6228 Cross-Site Scripting vulnerability in Codewalkers Ltwcalendar 4.1.3/4.2
Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
network
codewalkers
6.8
2005-12-05 CVE-2005-4011 SQL Injection vulnerability in Codewalkers Ltwcalendar
SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
network
low complexity
codewalkers CWE-89
7.5