VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 12, 2006· Updated Jun 16, 2026

CVE-2006-2973

CVE-2006-2973

Description

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) catid and (2) cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • PHP Lite/Calendar Express2 versions
    cpe:2.3:a:php_lite:calendar_express:2.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php_lite:calendar_express:2.2:*:*:*:*:*:*:*
    • (no CPE)range: =2.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.