CVE-2004-1552

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.

Affected products

Full Revolution Aspwebcalendar: 4.5

References

http://marc.info/?l=bugtraq&m=109604910025090&w=2
http://secunia.com/advisories/12651
http://secunia.com/advisories/24622
http://www.securityfocus.com/bid/11246
http://www.securityfocus.com/bid/23098
http://www.vupen.com/english/advisories/2007/1093
https://exchange.xforce.ibmcloud.com/vulnerabilities/17506
https://exchange.xforce.ibmcloud.com/vulnerabilities/33157
https://www.exploit-db.com/exploits/3546
http://marc.info/?l=bugtraq&m=109604910025090&w=2
http://secunia.com/advisories/12651
http://secunia.com/advisories/24622

Get alerted when CVE-2004-1552 or the next vulnerability affects your stack