CVE-2005-1865: Vincent Hor Calendarix Advanced

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.

Affected products

• Vincent Hor Calendarix Advanced: version 1.5 only

Published 2005-06-09. Last modified 2026-06-16.