DSA-2266-1 php5 - several

Bulletin has no description...

CVE-2009-3157

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

Cross site scripting

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

CVE-2009-3157

The CVE-2009-3157 entry concerns Drupal’s Calendar module (6.x) prior to 6.x-2.2, where remote authenticated users with the ability to create new content types can inject arbitrary script/HTML via the content type title (HTML/XSS). The vulnerability affects the Drupal Calendar module itself, not ...

CVE-2009-3157

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

SA-CONTRIB-2009-047 - Calendar - Cross Site Scripting

The Calendar module enables Views module to display any Date module date field as a calendar. The module does not properly escape user input when displaying titles of content types that have Date fields. A user with permission to create new content types including via the Date module's Date Tools...

PEAK XOOPS piCal cross-site scripting vulnerability

Overview piCal from PEAK XOOPS contains a cross-site scripting vulnerability. piCal from PEAK XOOPS is a calendar module with a scheduler for XOOPS. piCal contains a cross-site scripting vulnerability. Masako Oono of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with...

CVE-2008-3452

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

Sql injection

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

CVE-2008-3452

Summary of CVE-2008-3452 : A SQL injection vulnerability exists in the Calendar module of eNdonesia 8.4, exploitable via the loc_id parameter in the list_events action to mod.php. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 6.8 (Medium) w...

CVE-2008-3452

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

eNdonesia 8.4 (Calendar Module) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...

endonesia-sql.txt

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

eNdonesia 8.4 (Calendar Module) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ eNdonesia 8.4 Calendar Module Remote SQL Injection Exploit ============================================================ !/usr/bin/perl...

eNdonesia 8.4 (Calendar Module) - SQL Injection

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

eNdonesia 8.4 (Calendar Module) - SQL Injection

eNdonesia 8.4 Calendar Module - SQL Injection !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...

EZContents - 'minicalendar.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30373/info ezContents CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allo...

SineCMS <= 2.3.4 Calendar SQL Injection 'n something else..

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

CVE-2007-5187

SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...

Mambo module Calendar (Agenda) <= 155 (com_calendar.php) Multiple RFI Vuln

================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...