CVE ID:	CVE-2004-1552
Description:	SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1552 BugTraq ID: 11246 http://www.securityfocus.com/bid/11246 BugTraq ID: 23098 http://www.securityfocus.com/bid/23098 Bugtraq: 20040923 aspWebCalendar /aspWebAlbum: SQL injection (Google Search) http://marc.info/?l=bugtraq&m=109604910025090&w=2 https://www.exploit-db.com/exploits/3546 http://secunia.com/advisories/12651 http://secunia.com/advisories/24622 http://www.vupen.com/english/advisories/2007/1093 XForce ISS Database: aspwebcalendar-calendar-sql-injection(33157) https://exchange.xforce.ibmcloud.com/vulnerabilities/33157 XForce ISS Database: aspwebcalendar-sql-injection(17506) https://exchange.xforce.ibmcloud.com/vulnerabilities/17506