Unrestricted file upload

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

CVE-2007-1639

PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...

Sql injection

Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 unspecified vectors to the a calendar and 2 search modules, and an 2 unspecified cookie when the user logs out...

CVE-2007-1575: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 unspecified vectors to the a calendar and 2 search modules, and an 2 unspecified cookie when the user logs out...

PhpGroupWare日历模块class.holidaycalc.inc.php本地文件包含漏洞

phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。 phpGroupWare在处理用户请求时存在输入验证，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpGroupWare的calendar/inc/class.holidaycalc.inc.php脚本没有正确验证phpgwinfouserpreferencescommoncountry参数的输入，远程攻击者可以通过包含本地资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals且禁用了magicquotesgpc PHPGroupWare...

CVE-2006-4906

SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the newcalendarid parameter...

EZContents 2.0.3 - 'calendar.php?GLOBALS[language_home]' Remote File Inclusion

source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...

Calendar Mambo Module <= 1.5.7 Remote File Include Vulnerabilities

--------------------------------------------------------------------------------- Calendar Mambo Module = 1.5.7 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Web :...

calendar157.txt

--------------------------------------------------------------------------------- Calendar Module = 1.5.7 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application : Calendar...

nuked-SQL.txt

+nuked-klan +www.nuked-klan.org +founded By Moroccan Security Team +special 10x to:CiM-TeaM,Esp!onLeRaVaGe,nabil,Dranzelz,SnIpErSA,www.lezr.com +exemple +http://target/index.php?file=Calendar&m=sql&y=2006 +have nice day...

CVE-2006-1419

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

Sql injection

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

CVE-2006-1419

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

CVE-2006-1419

CVE-2006-1419 describes an SQL injection in the Calendar module of nuked-klan, affecting 1.7.5 and earlier. The vulnerability allows remote attackers to inject arbitrary SQL via the m parameter to index.php, potentially impacting data integrity. The available records confirm the affected software...

CVE-2005-0871

calendarscheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message...

CVE-2005-1116

Cross-site scripting XSS vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendarscheduler.php...

CVE-2005-1116

Cross-site scripting XSS vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendarscheduler.php...

CVE-2005-1116

CVE-2005-1116 is a documented XSS vulnerability in the phpBB Calendar module. The issue allows remote attackers to inject arbitrary web script or HTML via the start parameter to calendar_scheduler.php. The affected component is the phpBB Calendar integration; the root cause is improper sanitizati...

CVE-2004-1654

The CVE-2004-1654 entry concerns a SQL injection vulnerability in the calendar module of phpWebsite, affecting version 0.9.3-4 and earlier. The root cause is injection via the cal_template parameter, enabling remote attackers to execute arbitrary SQL commands. This is classified as HIGH severity ...

CVE-2004-1654: Undefined Security Weakness

SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via caltemplate...