Codewalkers Ltwcalendar — known CVE vulnerabilities

Every CVE whose affected-product data names Codewalkers Ltwcalendar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2005-4011 — CVSS 7.5 (high): SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote…
• CVE-2006-3041 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to execute…
• CVE-2006-6228 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject…
• CVE-2006-6229 — CVSS 5.0 (medium): Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords…