WordPress Js-appointment plugin <= 1.5 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Js-appointment plugin = 1.5 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/js-appointment.1.5.zip Version: 1.5 tested Note:...

WordPress Js-Appointment Plugin <= 1.5 - SQL Injection

Js-Appointment plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress JS-Appointment 1.5 SQL Injection

Exploit Title: WordPress Js-appointment plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if !empty$REQUEST'searchaction' switch$REQUEST'searchaction' case 'searchadv': requireoncePLUGINPATHALLBOOK."/libs/class.book.php"; $settings =...

WordPress Plugin Js-appointment 1.5 - SQL Injection

Exploit Title: WordPress Js-appointment plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if !empty$REQUEST'searchaction' switch$REQUEST'searchaction' case 'searchadv': requireoncePLUGINPATHALLBOOK."/libs/class.book.php"; $settings =...

WordPress Js-appointment plugin <= 1.5 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Js-appointment plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if !empty$REQUEST'searchaction' switch$REQUEST'searchaction' case 'searchadv':...

CentOS Update for thunderbird CESA-2009:1126 centos5 i386

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2009:1126 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

SQueRT 0.9.0 - New version released

SQueRT 0.9.0 - New version released CHANGELOG: tabbed interface date ribbon CSS/JS fixes and cleanup Bunch of new stuff Download SQueRT 0.9.0...

SQueRT 0.9.0 - New version released

SQueRT 0.9.0 - New version released CHANGELOG: tabbed interface date ribbon CSS/JS fixes and cleanup Bunch of new stuff Download SQueRT 0.9.0...

Wordpress Audio Player v2.0b6 - Web Vulnerability

Document Title: =============== Wordpress Audio Player v2.0b6 - Web Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 84 Product & Service Introduction: =============================== Wordpress Audio Player Plugin/Addon...

WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)

WeBid 1.0.2 - Persistent Cross-Site Scripting via SQL Injection Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP...

CVE-2010-4795

SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-4794

Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...

Sql injection

SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-4795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...

PT-2011-1742

Name of the Vulnerable Software and Affected Versions JoomlaSeller JS Calendar com jscalendar component versions 1.5.1 and 1.5.4 for Joomla! Description The issue allows remote attackers to inject arbitrary web script or HTML via the month and year parameters in a "jscalendar" action to...

CVE-2010-4794

Summary (CVE-2010-4794) : The Joomla! component JoomlaSeller JS Calendar (com_jscalendar) for Joomla! versions 1.5.1 and 1.5.4 contains multiple XSS vulnerabilities. An attacker can inject arbitrary JavaScript/HTML via the (1) month and (2) year parameters in a jscalendar action to index.php, ena...

CVE-2010-4795

CVE-2010-4795: A SQL injection vulnerability affects the Joomla! JS Calendar (com_jscalendar) component versions 1.5.1 and 1.5.4. The flaw allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. Underlying issue is improper handling of u...

CVE-2010-4794

Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...

CVE-2010-4795

SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...