Event Calendar PHP 1.0 Cross Site Scripting

Exploit Title; Event Calendar PHP Cross Site Scripting Vulnerability Date ; 24/03/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/event-calendar-php/ Category ; Webapps Type ; Sql Injection Tested on ; Ubuntu / Win7 Script Details ; - Demo ;...

Event Calendar PHP - cal_year Cross-Site Scripting

Event Calendar PHP - calyear Cross-Site Scripting source: https://www.securityfocus.com/bid/52701/info Event Calendar PHP is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Event Calendar PHP - 'cal_year' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52701/info Event Calendar PHP is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Multiple XSS vulnerabilities in All-in-One Event Calendar Plugin for WordPress

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in All-in-One Event Calendar Plugin for WordPress, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in All-in-One Event Calendar Plugin for WordPress: CVE-2012-1835 1.1...

Booking Calendar Lite CSRF (change password)

Exploit for php platform in category web applications Exploit Title: Booking Calendar Lite CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/booking-calendar-lite/27644/ Category:: webapps Demo : http://dev.kreci.net/calendar/admin.php Greetz:...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Acal Calendar 2.2.6 - Cross-Site Request Forgery Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer"...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested on: Windows,Linux Add User Username: Password...

Acal calendar 2.2.6 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Acal calendar Multiple Vulns Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested o...

Debian DSA-2421-1 : moodle - several vulnerabilities

Several security issues have been fixed in Moodle, a course management system for online learning : - CVE-2011-4308 / CVE-2012-0792 Rossiani Wijaya discovered an information leak in mod/forum/user.php. - CVE-2011-4584 MNet authentication didn't prevent a user using 'Login as' from jumping to a...

Bravenet Web Services Cross Site Scripting

Exploit Title: Bravenet Web Services Cross Site Scripting Date: 29.02.2012 Author: Sony Software Link: bravenet.com/ Google Dorks: inurl:calendar/day.php?usernum= or inurl: http://pub22.bravenet.com or what you want Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

[SECURITY] Fedora 17 Update: WebCalendar-1.2.4-3.fc17

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...

[SECURITY] Fedora 16 Update: WebCalendar-1.2.4-3.fc16

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...

PHP Calendar Extension “SdnToJulian()”远程整数溢出漏洞

BUGTRAQ ID: 46967 CVE ID: CVE-2011-1466 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP 5.3.6之前版本的Calendar扩展中的SdnToJulian函数在实现上存在整数溢出漏洞，可使攻击者通过calfromjd函数的首个参数造成拒绝服务 0 PHP 5.3.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...

Fedora Update for thunderbird-lightning FEDORA-2012-1147

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-1147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 15 Update: thunderbird-lightning-1.2-1.fc15

Lightning brings the Sunbird calendar to the popular email client, Mozilla Thunderbird. Since it's an extension, Lightning is tightly integrated with Thunderbird, allowing it to easily perform email-related calendaring tasks...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

[SECURITY] Fedora 16 Update: thunderbird-lightning-1.2-1.fc16

Lightning brings the Sunbird calendar to the popular email client, Mozilla Thunderbird. Since it's an extension, Lightning is tightly integrated with Thunderbird, allowing it to easily perform email-related calendaring tasks...

RHEL 4 : php (RHSA-2012:0071)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0071 advisory. - php: buffer over-read in Exif extension CVE-2011-0708 - php: Crash by converting serial day numbers SDN into Julian calendar CVE-2011-1466...

php: Crash by converting serial day numbers (SDN) into Julian calendar

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

Motigo Forums/Calendar/Guestbook Cross Site Scripting

Exploit Title: Motigo Forums/Calendar/Guestbook Cross Site Scripting Date: 28.01.2012 Author: Sony Software Link: http://motigo.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/motigo-forumscalendarguestbook-cross.html...