8759 matches found
CVE-2016-5575
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module...
CVE-2016-5575
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module...
CVE-2016-5575
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module...
CVE-2016-5575
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module...
calendar.songfacts.com XSS vulnerability
Vulnerable URL: http://calendar.songfacts.com/api/index.event-of-the-day.api.php?callback=prompt/OPENBUGBOUNTY/...
Event Calendar PHP 1.5 SQL Injection Vulnerability
Exploit for php platform in category web applications ===================================================== Event Calendar PHP 1.5 - SQL Injection ===================================================== Vendor Homepage: http://eventcalendarphp.com/ Date: 21 Oct 2016 Demo Link :...
Event Calendar PHP 1.5 Cross Site Request Forgery Vulnerability
Exploit for php platform in category web applications input type='hidden' name='caln...
Event Calendar PHP 1.5 SQL Injection
===================================================== Event Calendar PHP 1.5 - SQL Injection ===================================================== Vendor Homepage: http://eventcalendarphp.com/ Date: 21 Oct 2016 Demo Link : http://eventcalendarphp.com/eventcalendar/admin.php Version : 1.5 Platform...
Event Calendar PHP 1.5 Cross Site Request Forgery
"; print 'Enter Exploit...
King Phisher 1.5.2 - Phishing Campaign Toolkit
King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...
Event Calendar PHP 1.5 - SQL Injection
Event Calendar PHP 1.5 - SQL Injection ===================================================== Event Calendar PHP 1.5 - SQL Injection ===================================================== Vendor Homepage: http://eventcalendarphp.com/ Date: 21 Oct 2016 Version : 1.5 Platform : WebApp - PHP Author:...
Oracle E-Business Suite Oracle Common Applications Calendar Component Data Read Vulnerability
Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, etc. Oracle Common Application Calendar CAC, also known as Oracle...
Nextcloud: Dav sharing permissions issue
Steps 1. Create users "Test 1" and "Test 2", make "Test 1" member of "Group A" 2. Share a calendar with group "Group A" editable 3. Share the same calendar with user "Test 2" readonly 4. As "Test 1" open the calendar app and unshare the calendar from "Test 2" - works 5. As "Test 1" open the...
calendarlabs.com XSS vulnerability
Vulnerable URL: http://www.calendarlabs.com/online-calendar/2016-calendar/ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22865 VIP website status:| Yes...
Appointment Calendar - Stored Cross-Site Scripting (XSS)
When user submist data from appointments there is no validation which leads to stored XSS. curl 'Path to page where appointments calendar short-code is used' -H 'Accept: text/html, /; q=0.01' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.5' -H 'Content-Type:...
Appointment Calendar - Stored Cross-Site Scripting (XSS)
When user submist data from appointments there is no validation which leads to stored XSS. PoC curl 'Path to page where appointments calendar short-code is used' -H 'Accept: text/html, /; q=0.01' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.5' -H 'Content-Type:...
WordPress Appointment Calendar Plugin - Stored Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Appointment Calendar Plugin - Stored Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Joomla Event Booking 2.10.1 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version :...
Tiki Wiki CMS Calendar Remote Code Execution Vulnerability
Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A remote code execution vulnerability exists in the viewmode parameter of t...