Vincent Hor

11 CVEs across 3 Vincent Hor products. Browse Vincent Hor vulnerabilities, severities, and proof-of-concept exploits.

Vincent Hor products with known CVEs

ProductCVEs
Calendarix7
Calendarix Advanced4
Calendarix Basic1
Vincent Hor CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-32582007-06-27calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, whic…
CVE-2007-32592007-06-26Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via (1) an invalid month[] parameter to calendar.php, (2) an invalid catview[]…
CVE-2007-31832007-06-26Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands…
CVE-2007-31822007-06-26Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow remote attackers to inject arbitrary we…
CVE-2006-41352006-08-14PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via…
CVE-2006-30942006-06-19Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrar…
CVE-2006-18352006-04-19Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.
CVE-2006-04922006-02-01Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via (1) the catview parameter in cal_functions.in…
CVE-2005-18652005-06-09Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal…
CVE-2005-18642005-06-09PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath pa…
CVE-2005-18662005-05-31Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year…