PT-2003-1830 · Phpwebsite · Phpwebsite

Lorenzo Hernandez Garcia-Hierro · Published 2003-09-04 · Updated 2016-10-18 · CVE-2003-0735

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: phpWebSite versions 0.9.x and earlier

Description: A SQL injection issue in the Calendar module allows remote attackers to execute arbitrary SQL queries. This can be demonstrated using the year parameter.

Recommendations: For phpWebSite versions 0.9.x and earlier, avoid using the year parameter in the affected Calendar module until a fix is available. As a temporary workaround, consider restricting access to the Calendar module to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-0735

Affected Products

Phpwebsite

References · 5

• 🔥 https://exploit-db.com/exploits/23013 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0735 · Security Note
• http://marc.info/?l=bugtraq&m=106062021711496&w=2 · Note
• http://marc.info/?l=bugtraq&m=106252188522715&w=2 · Note
• http://kb.cert.org/vuls/id/925166 · Note