CVE-2005-4011

N/A Unknown

Published: December 05, 2005 Modified: April 16, 2026

Description

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://ltwcalendar.sourceforge.net/changelog.php

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html

Source: cve@mitre.org

http://secunia.com/advisories/17799

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016364

Source: cve@mitre.org

http://www.Silitix.com/calendar-cws.php

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2006-December/001154.html

Source: cve@mitre.org

http://www.osvdb.org/21195

Source: cve@mitre.org

http://www.osvdb.org/27539

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438232/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438580/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15636

Source: cve@mitre.org

http://www.securityfocus.com/bid/18593

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2652

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/23312

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27362

Source: cve@mitre.org

http://ltwcalendar.sourceforge.net/changelog.php