CVE-2007-3627: Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute a...

Security readout for executives and security teams

This record describes SQL injection in PHP Lite Calendar Express 2.2. If the legacy calendar is still reachable, an attacker may be able to manipulate its database through affected request parameters. The source record is sparse and explicitly says the provenance is unknown, so business urgency depends on whether this old software is still deployed. Exposure is likely limited to organizations still running PHP Lite Calendar Express 2.2, especially if the application is internet-facing or reachable by untrusted users. The supplied affected-product metadata is incomplete, so asset inventory should be based on application names, files, and routes rather than CPE matching. Treat this as a legacy-software exposure question. It becomes urgent if PHP Lite Calendar Express 2.2 is still deployed on a reachable server, because SQL injection can affect stored calendar data and possibly the underlying database. If not present, no action is needed beyond documentation. Mitigation focus: Identify and remove any exposed PHP Lite Calendar Express 2.2 deployments.; Check vendor or archival project guidance; the supplied sources name no patch.; If retained temporarily, restrict access to trusted networks or authenticated users..

Prepared

Jun 29, 2026, 04:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.