Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Luxcal Web Calendar CRITICAL 9.8
CVE-2025-25221

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If t…

Fix: 5.3.3l / 5.3.3m+
Fix from $2,300 2025-02-18
Luxcal Web Calendar CRITICAL 9.8
CVE-2025-25222

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php.…

Fix: 5.3.3l / 5.3.3m+
Fix from $2,300 2025-02-18
Luxcal Web Calendar HIGH 7.5
CVE-2025-25224

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dload…

Fix: 5.3.3l / 5.3.3m+
Fix from $1,950 2025-02-18
Luxcal Web Calendar MEDIUM 5.3
CVE-2025-25223

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. …

Fix: 5.3.3l / 5.3.3m+
Fix from $1,600 2025-02-18
Luxcal Web Calendar CRITICAL 9.8
CVE-2023-46700

SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a …

Fix: 5.2.4l / 5.2.4m+
Fix from $2,300 2023-11-20
Luxcal Web Calendar MEDIUM 6.1
CVE-2023-47175

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) al…

Fix: 5.2.4l / 5.2.4m+
Fix from $1,600 2023-11-20
Luxcal Web Calendar CRITICAL 9.1
CVE-2023-39939

SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a …

Fix: 5.2.3m / 5.2.3l+
Fix from $2,300 2023-08-21
Luxcal Web Calendar MEDIUM 6.1
CVE-2023-39543

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) al…

Fix: 5.2.3m / 5.2.3l+
Fix from $1,600 2023-08-21
Luxcal CRITICAL 9.8
CVE-2021-45914

In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be auth…

Fix: 5.2.0+
Fix from $2,300 2022-05-24
Luxcal CRITICAL 9.8
CVE-2021-45915

In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be auth…

Fix: 5.2.0+
Fix from $2,300 2022-05-24