CVE-2005-1865

HIGH 7.5CVE-2005-1865 · Published 09/06/2005 · updated 16/06/2026

In short

CVE-2005-1865 is a HIGH (CVSS 7.5) vulnerability affecting calendarix advanced (vincent hor).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
calendarix advanced vincent_hor	`= 1.5`	No fix yet

Description

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.

References

archives.neohapsis.com/archives/bugtraq/2005-05/0356.html · Exploit
secunia.com/advisories/15569
securitytracker.com/alerts/2005/May/1014083.html · Exploit
calendarix.com/download_advanced.php · URL Repurposed
calendarix.com/download_basic.php · URL Repurposed
osvdb.org/16971
osvdb.org/16972
osvdb.org/16974
osvdb.org/16975

More vulnerabilities in calendarix advanced

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free