CaLogic Calendars 1.2.2 - 'CLPath' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM CaLogic Calendars V1.2.2 - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl dork: CaLogic Calendars V1.2.2 reconfig.php: code...

EV0024.txt

New eVuln Advisory: CaLogic Calendars Multiple XSS Vulnerabilities http://evuln.com/vulns/24/summary/bt/ --------------------Summary---------------- Software: CaLogic Calendars Sowtware's Web Site: http://www.calogic.de/ Versions: 1.2.2 Critical Level: Moderate Type: Cross-Site Scripting Class:...

[eVuln] CaLogic Calendars Multiple XSS Vulnerabilities

New eVuln Advisory: CaLogic Calendars Multiple XSS Vulnerabilities http://evuln.com/vulns/24/summary/bt/ --------------------Summary---------------- Software: CaLogic Calendars Sowtware's Web Site: http://www.calogic.de/ Versions: 1.2.2 Critical Level: Moderate Type: Cross-Site Scripting Class:...

CVE-2006-0180

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2006-0180

CaLogic Calendars 1.2.2 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via the Title field on the "Adding New Event" page, and possibly other vectors involving iframe tags. The affected component is the calendar input handling in C...

Cross site scripting

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2006-0180

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

[SA18417] CaLogic "title" New Event Script Insertion Vulnerability

TITLE: CaLogic "title" New Event Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18417 VERIFY ADVISORY: http://secunia.com/advisories/18417/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CaLogic 1.x http://secunia.com/product/5401/ DESCRIPTION:...

CVE-2005-2576

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to 1 doclsqlres.php, 2 clmcpreload.php, 3 viewhistlog.php, 4 mcconfig.php, 5 doclsqlbak.php, 6 defcalsel.php, or 7 clminical.php, which reveals the path in an error message...

CVE-2005-2576

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to 1 doclsqlres.php, 2 clmcpreload.php, 3 viewhistlog.php, 4 mcconfig.php, 5 doclsqlbak.php, 6 defcalsel.php, or 7 clminical.php, which reveals the path in an error message...

CVE-2005-2576

CaLogic 1.22 (and possibly earlier) is affected by CVE-2005-2576. A remote attacker can cause an information disclosure by requesting any of the following endpoints: doclsqlres.php, clmcpreload.php, viewhistlog.php, mcconfig.php, doclsqlbak.php, defcalsel.php, or cl_minical.php. The vulnerability...

Full path disclosure in CaLogic 1.22 and possible in older versions.

Full path disclosure in CaLogic 1.22 and possible in older versions. Language: PHP Project name: CaLogic Risk: Low Home page: http://www.calogic.de Discovered by: GB & Zetha Explotation examples: http://target/calogic122/doclsqlres.php Fatal error: Call to a member function on a non-object in...

CVE-2005-2321

PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to 1 clminical.php, 2 clmcpreload.php, 3 mcconfig.php, or 4 mcpi-demo.php...

CVE-2005-2321

PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to 1 clminical.php, 2 clmcpreload.php, 3 mcconfig.php, or 4 mcpi-demo.php...

CVE-2005-2321

CaLogic 1.2.2 is affected by a PHP remote file inclusion vulnerability. The flaw allows an attacker to execute arbitrary code by passing a crafted CLPATH value to endpoints such as /cl_minical.php, /clmcpreload.php, /mcconfig.php, or /mcpi-demo.php. The root cause is improper handling of CLPATH l...

PT-2005-3247 · Calogic · Calogic

Name of the Vulnerable Software and Affected Versions: CaLogic version 1.2.2 Description: The issue allows remote attackers to execute arbitrary code. This is achieved via the CLPATH parameter to several API endpoints: "/cl minical.php", "/clmcpreload.php", "/mcconfig.php", or "/mcpi-demo.php"...

[SA16090] CaLogic "CLPATH" Arbitrary File Inclusion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...