CVE-2004-1654

SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via cal_template.

Date published : 2005-02-20

http://www.securityfocus.com/bid/11088

http://marc.info/?l=bugtraq&m=109413493005513&w=2