Back

CVE-2005-4008

SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter, and possibly the (2) Y and (3) m parameters.

Published: Dec 5, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
jax_calendar jax_calendar 1.34

GitHub Security Advisory GHSA-vmwf-w2vq-x4fr

SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to...

References (6)

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.32%

Top 31% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub