47 matches found
CVE-2007-6553
The CVE-2007-6553 entries describe multiple PHP remote file inclusion vulnerabilities in TeamCal Pro (versions up to 3.1.000 and earlier) that allow remote attackers to execute arbitrary PHP code by supplying a URL in the CONF[app_root] parameter to various includes/modules (e.g., tcuser.class.ph...
CVE-2007-4845
CVE-2007-4845 describes multiple SQL injection vulnerabilities in RW::Download 2.0.3 lite, specifically in UPLOAD/index.php. The issue allows remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid parameters. Documented impact is partial confidentiality, integrity, and ava...
CVE-2005-4845
CVE-2005-4845 concerns the Java Plug-in versions 1.4.2_03 and 1.4.2_04, including the associated applet redirector controls. The issue is that creating a COM object linked to the control’s CLSID (not intended for use within Internet Explorer) can crash Internet Explorer, resulting in a denial of ...
CVE-2006-4845
PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcconfigapproot parameter...
CVE-2006-4845
CVE-2006-4845 describes a PHP remote file inclusion in TeamCal Pro <=2.8.001 via a URL in tc_config[app_root] in includes/footer.html.inc.php, enabling arbitrary PHP code execution. Connected records also show a related family (CVE-2007-6553) for TeamCal Pro
