Bosdev: Security Vulnerabilities
Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters.
CVSS Score
7.5
EPSS Score
0.004
Published
2005-11-30
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
CVSS Score
5.0
EPSS Score
0.005
Published
2004-11-23
Page 2