FKIE_CVE-2005-4011

Vulnerability from fkie_nvd - Published: 2005-12-05 11:03 - Updated: 2026-06-16 22:18
Severity
Summary
SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
cve@mitre.orghttp://ltwcalendar.sourceforge.net/changelog.php
cve@mitre.orghttp://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html
cve@mitre.orghttp://secunia.com/advisories/17799Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1016364
cve@mitre.orghttp://www.Silitix.com/calendar-cws.php
cve@mitre.orghttp://www.attrition.org/pipermail/vim/2006-December/001154.html
cve@mitre.orghttp://www.osvdb.org/21195
cve@mitre.orghttp://www.osvdb.org/27539
cve@mitre.orghttp://www.securityfocus.com/archive/1/438232/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/archive/1/438580/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/15636
cve@mitre.orghttp://www.securityfocus.com/bid/18593
cve@mitre.orghttp://www.vupen.com/english/advisories/2005/2652Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/23312
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/27362
af854a3a-2127-422b-91ae-364da2661108http://ltwcalendar.sourceforge.net/changelog.php
af854a3a-2127-422b-91ae-364da2661108http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/17799Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016364
af854a3a-2127-422b-91ae-364da2661108http://www.Silitix.com/calendar-cws.php
af854a3a-2127-422b-91ae-364da2661108http://www.attrition.org/pipermail/vim/2006-December/001154.html
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/21195
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27539
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/438232/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/438580/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/15636
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18593
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2005/2652Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/23312
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27362
Impacted products
Vendor Product Version
codewalkers ltwcalendar *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codewalkers:ltwcalendar:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "06DB42A5-ADF3-4949-919E-C84DF296BD9F",
              "versionEndIncluding": "4.1.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
    }
  ],
  "id": "CVE-2005-4011",
  "lastModified": "2026-06-16T22:18:03.343",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-12-05T11:03:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://ltwcalendar.sourceforge.net/changelog.php"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17799"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016364"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.Silitix.com/calendar-cws.php"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.attrition.org/pipermail/vim/2006-December/001154.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/21195"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27539"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/438232/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/438580/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/15636"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/18593"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2005/2652"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23312"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27362"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://ltwcalendar.sourceforge.net/changelog.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17799"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016364"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.Silitix.com/calendar-cws.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.attrition.org/pipermail/vim/2006-December/001154.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/21195"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27539"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/438232/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/438580/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/15636"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/18593"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2005/2652"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23312"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27362"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.