CVE-2004-1552

N/A Unknown

Published: December 31, 2004 Modified: April 16, 2026

Description

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://marc.info/?l=bugtraq&m=109604910025090&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12651

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/24622

Source: cve@mitre.org

http://www.securityfocus.com/bid/11246

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/23098

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1093

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17506

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33157

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3546

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109604910025090&w=2