PT-2005-2477 · Aaron · Aaron Outpost Asp Inline Corporate Calendar

Zinho · Published 2005-05-11 · Updated 2017-07-11 · CVE-2005-1481

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Aaron Outpost ASP Inline Corporate Calendar (affected versions not specified)

Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved by manipulating the Event ID parameter in specific API endpoints, such as "/defer.asp" or "/details.asp".

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1481

Affected Products

Aaron Outpost Asp Inline Corporate Calendar

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-1481 · Security Note
• http://secunia.com/advisories/15239 · Note
• http://osvdb.org/16193 · Note
• http://osvdb.org/16192 · Note
• http://securitytracker.com/id?1013884 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20416 · Note
• http://marc.info/?l=bugtraq&m=111530675909673&w=2 · Note