Unrated severityNVD Advisory· Published Dec 5, 2005· Updated Jun 16, 2026

CVE-2005-4008

Description

SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter, and possibly the (2) Y and (3) m parameters.

Affected products

Jax Calendar/Jax Calendar
cpe:2.3:a:jax_calendar:jax_calendar:1.34:*:*:*:*:*:*:*
Jax/Calendarllm-create
Range: =1.34

Patches

Vulnerability mechanics

References

www.osvdb.org/21406nvdExploit
pridels0.blogspot.com/2005/11/jax-calendar-134-vuln.htmlnvd
www.securityfocus.com/bid/16130nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000