Luxsoft

11 CVEs across 4 Luxsoft products. Browse Luxsoft vulnerabilities, severities, and proof-of-concept exploits.

Luxsoft products with known CVEs

ProductCVEs
Luxcal Web Calendar8
Luxcal Web Calendar5
The Luxcal Web Calendar4
Luxcal2
Luxsoft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-36989Medium5.82026-09-13A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.
CVE-2025-25224High7.52025-02-18The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If…
CVE-2025-25223Medium5.32025-02-18The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vu…
CVE-2025-25222Critical9.82025-02-18The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this v…
CVE-2025-25221Critical9.82025-02-18The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulner…
CVE-2023-47175Medium6.12023-11-20Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a rem…
CVE-2023-46700Critical9.82023-11-20SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote una…
CVE-2023-39939Critical9.12023-08-21SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote una…
CVE-2023-39543Medium6.12023-08-21Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a rem…
CVE-2021-45915Critical9.82022-05-24In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated…
CVE-2021-45914Critical9.82022-05-24In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated…