CVE-2005-2880: Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow...

Security readout for executives and security teams

CVE-2005-2880 is an old SQL injection issue in phpCommunityCalendar 4.0.3, possibly earlier. A remote attacker could manipulate login or calendar location input to run database queries. Business risk depends entirely on whether this legacy PHP application is still deployed, especially on the public internet. Exposure is likely limited to organizations still running phpCommunityCalendar 4.0.3 or possibly earlier. Publicly reachable instances with login.php or week.php are the main concern. Modern environments are unaffected unless this legacy application remains installed. Prioritize discovery first. If found internet-facing, treat remediation as high urgency because SQL injection can expose or alter database records. If the application is absent, no further action is needed beyond documenting the check. Mitigation focus: Inventory systems for phpCommunityCalendar deployments and exposed login.php or week.php routes.; Check vendor or advisory guidance for a fixed version; the bundle names no patch.; Retire or replace the application if no supported fixed release is available..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.