Browse CVEs

CRITICAL 9.8 CVE-2025-25221 The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If t… Luxcal Web Calendar 5.3.3l / 5.3.3m+ Fix from $2,3002025-02-18 CRITICAL 9.8 CVE-2025-25222 The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php.… Luxcal Web Calendar 5.3.3l / 5.3.3m+ Fix from $2,3002025-02-18 HIGH 7.5 CVE-2025-25224 The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dload… Luxcal Web Calendar 5.3.3l / 5.3.3m+ Fix from $1,9502025-02-18 MEDIUM 5.3 CVE-2025-25223 The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. … Luxcal Web Calendar 5.3.3l / 5.3.3m+ Fix from $1,6002025-02-18 CRITICAL 9.8 CVE-2023-46700 SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a … Luxcal Web Calendar 5.2.4l / 5.2.4m+ Fix from $2,3002023-11-20 MEDIUM 6.1 CVE-2023-47175 Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) al… Luxcal Web Calendar 5.2.4l / 5.2.4m+ Fix from $1,6002023-11-20 CRITICAL 9.1 CVE-2023-39939 SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a … Luxcal Web Calendar 5.2.3m / 5.2.3l+ Fix from $2,3002023-08-21 MEDIUM 6.1 CVE-2023-39543 Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) al… Luxcal Web Calendar 5.2.3m / 5.2.3l+ Fix from $1,6002023-08-21 CRITICAL 9.8 CVE-2021-45914 In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be auth… Luxcal 5.2.0+ Fix from $2,3002022-05-24 CRITICAL 9.8 CVE-2021-45915 In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be auth… Luxcal 5.2.0+ Fix from $2,3002022-05-24