CVE-2017-14922

Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users...

CVE-2017-14922

CVE-2017-14922 describes a stored XSS in Tine 2.0 Community Edition prior to 2017.08.4. An authenticated user can inject JavaScript via an IMG element in History views (Profile, Calendar, Tasks, CRM); the payload is mishandled during rendering by admins and other users. The affected software is T...

calendars.registrar.indiana.edu XSS vulnerability

Vulnerable URL: http://calendars.registrar.indiana.edu/deans/search.php?cpath==DeansCalendar=20170928=drgh%22%27%20Type=Text%20AutoF%3CK%3Eocus%20O%3CK%3EnFocus=confirm1%20//&submit.x;=0&submit.y;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability...

Microsoft Exchange Server Multiple Vulnerabilities (KB4036108)

This host is missing an important security update according to Microsoft KB4036108 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2017-27427)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. An attacker could exploit the vulnerability to...

Description of the security update for Microsoft Exchange: September 12, 2017

None None...

Microsoft Exchange Information Disclosure Vulnerability

An input sanitization issue exists with Microsoft Exchange that could potentially result in unintended Information Disclosure. An attacker who successfully exploited the vulnerability could identify the existence of RFC1918 addresses on the local network from a client on the Internet. An attacker...

KLA11102 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges. Below is a complete list of vulnerabilities: 1. An incorrect parsing of Calendar-related messages can be exploited ...

CVE-2014-8675

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

CVE-2014-8675

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

Joomla Component com_calendarplanner SQL Injection

SQL Injection vulnerability in Joomla Calendar Planner component categoryid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

sjasc.edu XSS vulnerability

Open Bug Bounty ID: OBB-281284 Description| Value ---|--- Affected Website:| sjasc.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mixmax: app.mixmax.com Information Discloure on cal.mixmax.com and Not Signing out after Removing information grant access from Google

Hi, I found that there was Email Disclosed in the source code of the public calendar link. PoC: 1: Visit https://cal.mixmax.com/wwelatestevents 2: View Page Source 3: Find email at the end of the page. organizer:...

Calendar Planner Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL.Calendar Planner is a complete, easy-to-use calendar tool. A SQL injection vulnerability exists in the Joomla! Calendar Planner component, which can be exploited by an attacker to obtain sensitive...

Calendar Planner 1.0.1 - SQL Injection

Calendar Planner 1.0.1 - SQL Injection resolution: update to 1.0.2 update notice: http://www.joomlathat.com/news/news/calendar-planner/calendar-planner-1-0-2-security-release...

Zap Calendar, 4.3.6 and previous, SQL Injection

Zap Calendar, 4.3.6, SQL Injection resolution: update to 4.3.7 update notice url: https://zcontent.net/support/zapcalendar/265-change-log-for-zap-calendar...

Joomla Zap Calendar Lite 4.3.4 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Zap Calendar Lite 4.3.4 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://zcontent.net/ Software Link:...

Joomla Calendar Planner 1.0.1 SQL Injection

Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/calendar-planner/ Demo: http://demo.joomlathat.com/ Version: 1.0.1...

Joomla Zap Calendar Lite 4.3.4 SQL Injection

Exploit Title: Joomla! Component Zap Calendar Lite 4.3.4 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://zcontent.net/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/zap-calendar-lite/ Demo: http://demo.zapcalendar.com/ Version: 4.3...

Joomla Calendar Planner 1.0.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link:...