calogic records
5 published records for vendor calogic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
5 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
31Monitor | CVE-2005-2321No exploit | PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) ccalogic · calogic | High7.5 | 2.6%Jul 19, 2005 |
31Monitor | CVE-2006-2570Proof of concept | PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLcalogic · calogic calendars | High7.5 | 2.5%May 24, 2006 |
30Monitor | CVE-2008-2444Proof of concept | SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langcalogic · calogic calendars · CWE-89 | High7.5 | 0.9%May 27, 2008 |
20Monitor | CVE-2005-2576No exploit | CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) doclsqlres.calogic · calogic | Medium5.0 | 1.3%Aug 16, 2005 |
17Monitor | CVE-2006-0180No exploit | Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Tcalogic · calogic calendars | Medium4.3 | 1.3%Jan 12, 2006 |
- CVE-2005-232131Monitor
PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) c
HighCVSS 7.5No exploitEPSS 2%calogic · calogicJul 19, 2005
- CVE-2006-257031Monitor
PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GL
HighCVSS 7.5Proof of conceptEPSS 2%calogic · calogic calendarsMay 24, 2006
- CVE-2008-244430Monitor
SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the lang
HighCVSS 7.5Proof of conceptEPSS 0%calogic · calogic calendarsMay 27, 2008
- CVE-2005-257620Monitor
CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) doclsqlres.
MediumCVSS 5.0No exploitEPSS 1%calogic · calogicAug 16, 2005
- CVE-2006-018017Monitor
Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the T
MediumCVSS 4.3No exploitEPSS 1%calogic · calogic calendarsJan 12, 2006