CVE-2006-6792: SQL injection vulnerability in calendar_detail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote att...

Security readout for executives and security teams

CVE-2006-6792 describes a SQL injection flaw in Calendar MX BASIC 1.0.2 and earlier. A remote attacker could target the calendar detail page's ID parameter to run arbitrary SQL. The record notes unknown provenance and relies on third-party information, so treat it as credible but incomplete. Exposure is likely limited to legacy sites still running Calendar MX BASIC 1.0.2 or earlier, especially if calendar_detail.asp is internet-accessible. Modern environments are unlikely to be affected unless this old ASP application remains deployed. Prioritize only if this legacy calendar application is still deployed. If exposed, the business risk is meaningful because SQL injection can affect stored data. If not present, no action beyond documentation is needed. Mitigation focus: Identify and retire any Calendar MX BASIC 1.0.2 or earlier deployments.; Check archived vendor or advisory guidance before choosing a patch path.; Restrict access to calendar_detail.asp if immediate removal is not possible..

Prepared

Jun 29, 2026, 08:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.