CVE-2004-1552

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.08%

Published

Dec 31, 2004

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

TrickestTrickest PoC index Exploit-DBAspWebCalendar 4.5 - 'eventid' SQL Injection Exploit-DBWeb Calendar System 3.12/3.30 - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.

Affected Products (1)

full_revolution · aspwebcalendarvulnerable

References (18)

http://marc.info/?l=bugtraq&m=109604910025090&w=2

http://secunia.com/advisories/12651

Vendor Advisory

http://secunia.com/advisories/24622

http://www.securityfocus.com/bid/11246

Exploit

http://www.securityfocus.com/bid/23098

http://www.vupen.com/english/advisories/2007/1093

https://exchange.xforce.ibmcloud.com/vulnerabilities/17506

https://exchange.xforce.ibmcloud.com/vulnerabilities/33157

https://www.exploit-db.com/exploits/3546