CVE-2008-3452

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

CVE-2008-3452

Summary of CVE-2008-3452 : A SQL injection vulnerability exists in the Calendar module of eNdonesia 8.4, exploitable via the loc_id parameter in the list_events action to mod.php. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 6.8 (Medium) w...

eNdonesia 8.4 (Calendar Module) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...

endonesia-sql.txt

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

eNdonesia 8.4 (Calendar Module) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ eNdonesia 8.4 Calendar Module Remote SQL Injection Exploit ============================================================ !/usr/bin/perl...

eNdonesia 8.4 (Calendar Module) - SQL Injection

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

eNdonesia 8.4 (Calendar Module) - SQL Injection

eNdonesia 8.4 Calendar Module - SQL Injection !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...

EZContents - 'minicalendar.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30373/info ezContents CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allo...

SineCMS <= 2.3.4 Calendar SQL Injection 'n something else..

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

CVE-2007-5187

SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...

Mambo module Calendar (Agenda) <= 155 (com_calendar.php) Multiple RFI Vuln

================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2049

CVE-2007-2049 affects the Calendar Module (com_calendar) 1.5.5 in Mambo. The vulnerability arises from multiple PHP remote file inclusion flaws that allow an attacker to supply a URL via the absolute_path parameter to either com_calendar.php or mod_calendar.php, enabling remote code execution. NV...

Unrestricted file upload

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

CVE-2007-1639

PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...

Sql injection

Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 unspecified vectors to the a calendar and 2 search modules, and an 2 unspecified cookie when the user logs out...

CVE-2007-1575: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 unspecified vectors to the a calendar and 2 search modules, and an 2 unspecified cookie when the user logs out...