VYPR

Corporate Calendar

by ASP Inline

CVEs (2)

  • CVE-2009-2243Jun 27, 2009
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2009-2241Jun 27, 2009
    risk 0.03cvss epss 0.02

    Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.