WordPress My Calendar Plugin <= 2.3.28 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

[SECURITY] Fedora 21 Update: owncloud-7.0.5-2.fc21

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

Proverbs Web Calendar 2.1.2 Cross Site Scripting

Proverbs Web Calendar 2.1.2 XSS Cross-site Scripting Security Vulnerabilities Exploit Title: Proverbs Web Calendar /calendar.php Multiple Parameters XSS Cross-site Scripting Security Vulnerabilities Vendor: Proverbs Product: Proverbs Web Calendar Vulnerable Versions: 1.0.0 1.1 1.2.2 2.1 2.1.2...

WordPress PHP Event Calendar 1.5 Arbitrary File Upload

Exploit Title: Wordpress PHP Event Calendar Plugin - Arbitrary File Upload Google Dork: inurl:/plugins/php-event-calendar/ Date: 02.04.2015 Exploit Author: CrashBandicot @DosPerl Source Plugin: https://wordpress.org/plugins/php-event-calendar/ Vendor HomePage: http://phpeventcalendar.com/ Version...

PHP Event Calendar <= 1.5 - Arbitrary File Upload

The php-event-calendar WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress PHP Event Calendar Plugin <= 1.5 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability via "uploadify.php" file. Solution Update the plugin...

PHP calendar extension integer overflow vulnerability

PHP is a popular programming language. Multiple integer overflow vulnerabilities in the PHP calendar extension allow remote attackers to cause a denial of service attack by passing a specially crafted year value to the GregorianToSdn or JulianToSdn functions...

CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...

GNOME Shell security, bug fix, and enhancement update

clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-10 - Add patch for quadbuffer stereo suppport Resolves: rhbz1108891 cogl 1.14.1-6 - Add patches for quadbuffer stereo suppport Resolves:...

WordPress Webdorado Spider Event Calendar SQL Injection

WordPress Spider Event Calendar is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ocPortal 9.0.16 Cross Site Scripting

Exploit Title: ocPortal 9.0.16 Multiply XSS Vulnerabilities Google Dork: "Copyright c ocPortal 2011 " Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://ocportal.com/ Vendor contacted: 22-2-2015 Fix: http://ocportal.com/site/news/view/securityissues/xss-vulnerability-patch.htm...

WordPress Plugin Spider Event Calendar SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server to set up a personal blog site . Spider Event Calendar is one of the highly configurable calendar plugin . A SQL injection vulnerability exist...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

Sql injection

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

The CVE-2015-2196 issue affects WordPress Spider Event Calendar plugin (versions up to 1.4.9). The vulnerability arises in the spiderbigcalendar_month action when processing the cat_id parameter in wp-admin/admin-ajax.php, allowing an attacker to perform SQL injection. Impact described across sou...

WordPress CP Multi View Event Calendar Plugin <= 1.1.4 - SQL Injection

CP Multi View Event Calendar plugin is prone to an SQL injection vulnerability in "id" and "viewid" parameters. Also, there is a cross-site scripting vulnerability in "weekstartday" parameter. Solution Update the plugin...

WordPress Plugin cp-multi-view-calendar 1.1.4 - SQL Injection

Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com/ Software...

WordPress CP Multi-View Calendar Unauthenticated SQL Injection Scanner

This module will scan given instances for an unauthenticated SQL injection within the CP Multi-View Calendar plugin v1.1.4 for Wordpress. Module Options msf use auxiliary/scanner/http/wordpress/cpcalendarsqli msf undefinedcpcalendarsqli show actions ...actions... msf undefinedcpcalendarsqli set...

WordPress Webdorado Spider Event Calendar 1.4.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications . Exploit Title: WordPress: Webdorado Spider Event Calendar = 1.4.9 SQL Injection Date: 2015-02-12 Exploit Author: Mateusz Lach Vendor Homepage: https://www.facebook.com/WebDorado or http://www.webdorado.com Software Link:...