CVE-2005-0474

Publication date 30 March 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie.

Status

Package Ubuntu Release Status
webcalendar 7.04 feisty Not in release
6.10 edgy
Fixed 1.0.2-2.1
6.06 LTS dapper
Fixed 1.0.2-2.1