Unrated severityNVD Advisory· Published Jun 19, 2006· Updated Jun 16, 2026

CVE-2006-3094

Description

Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) cal_event.php and (2) cal_popup.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vincent Hor/Calendarix
cpe:2.3:a:vincent_hor:calendarix_basic:*:*:*:*:*:*:*:*
Range: <=0.7.2006-04-01
Calendarix/Basicllm-fuzzy
Range: <=0.7.20060401

Patches

Vulnerability mechanics

References

secunia.com/advisories/20645nvdVendor Advisory
marc.infonvd
securitytracker.com/idnvd
www.osvdb.org/26528nvd
www.osvdb.org/26529nvd
www.vupen.com/english/advisories/2006/2360nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27186nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000