The LuxCal Web Calendar vulnerabilities
3 known vulnerabilities in The LuxCal Web Calendar from LuxSoft. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
The LuxCal Web Calendar: Missing Authentication for Critical Functionality
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
- 9.8 Critical severity
The LuxCal Web Calendar: Improper Neutralization of Special Elements used in an SQL Command
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
- 9.8 Critical severity
The LuxCal Web Calendar: Improper Neutralization of Special Elements used in an SQL Command
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.