{"id":"CVE-2007-6158","aliases":["EUVD-2007-6127","GHSA-336w-w337-qw2v"],"status":"published","title":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and...","description":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00961,"percentile":0.61816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2007-11-29T01:00:00Z","modified":"2026-06-16T22:47:30Z","exploits":[{"source":"exploitdb","id":"EDB-30810","title":"Proverbs Web Calendar 1.1 - 'Password' SQL Injection","type":"webapps","platform":"php","date":"2007-11-26","verified":true,"url":"https://www.exploit-db.com/exploits/30810"}],"products":[{"vendor":"proverbs","product":"proverbs_web_calendar"}],"references":[{"url":"http://www.securityfocus.com/bid/26584","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://securityreason.com/securityalert/3401","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38628","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/484193/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6158"},{"url":"https://github.com/advisories/GHSA-336w-w337-qw2v"}],"sources":{"cve":[{"id":"CVE-2007-6158","description":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.","status":"published","published":"2007-11-29T01:00:00Z","modified":"2024-08-07T15:54:26.855Z","updated_at":"2026-11-02T13:33:07.91528Z"}],"euvd":[{"id":"EUVD-2007-6127","description":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.","status":"published","published":"2007-11-29T01:00:00Z","modified":"2024-08-07T15:54:26Z","updated_at":"2026-11-03T01:16:14.290993Z"}],"ghsa":[{"id":"GHSA-336w-w337-qw2v","title":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and...","description":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.","status":"published","published":"2022-05-01T18:40:06Z","modified":"2023-01-31T05:05:18Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:48:49.563933Z"}],"nvd":[{"id":"CVE-2007-6158","description":"Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.","status":"published","published":"2007-11-29T01:46:00Z","modified":"2026-06-16T22:47:30.69Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:23.208914Z"}]}}