CyberSec.Space Logo
Back to CVE Browser

CVE-2005-4011

HIGH
7.5
CVSS Severity Score
EPSS Score0.1570%
EPSS Percentile1.34th
PublishedDec 5, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦
Codewalkers

Ltwcalendar

<= 4.1.3

References & Advisories

🔗 http://ltwcalendar.sourceforge.net/changelog.php
🔗 http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html
🔗 http://secunia.com/advisories/17799
🔗 http://securitytracker.com/id?1016364
🔗 http://www.Silitix.com/calendar-cws.php
🔗 http://www.attrition.org/pipermail/vim/2006-December/001154.html
🔗 http://www.osvdb.org/21195
🔗 http://www.osvdb.org/27539

Related Vulnerabilities

CVE-2006-30417.5

PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to ex...

CVE-2006-62286.8

Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers ...

CVE-2006-62295.0

Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct ...

CVE-2005-044110.0

Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticat...