Cross site scripting

Cross-site scripting XSS vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note...

Design/Logic Flaw

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate...

CVE-2011-3254

The CVE-2011-3254 entry corresponds to a cross-site scripting (XSS) vulnerability in the Calendar component of Apple iOS prior to version 5. The issue allows a remote attacker to inject arbitrary script or HTML via an invitation note, expanding the attack surface to calendar-related interactions....

CVE-2011-3254

Cross-site scripting XSS vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note...

CVE-2010-4953

Unspecified vulnerability in the JW Calendar jwcalendar extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in the JW Calendar jwcalendar extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-4953

Unspecified vulnerability in the JW Calendar jwcalendar extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-4953

The CVE-2010-4953 entry concerns TYPO3's JW Calendar extension (jw_calendar) vulnerable in versions up to 1.3.20. The provided sources state an unspecified vulnerability that allows remote code execution via unknown vectors. Affected component: jw_calendar in TYPO3; impact is described as arbitra...

CVE-2010-4890

Cross-site scripting XSS vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4891

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4880

Multiple cross-site scripting XSS vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to inject arbitrary web script or HTML via the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

CVE-2010-4881

Multiple cross-site request forgery CSRF vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to hijack the authentication of unspecified victims for requests that use the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to inject arbitrary web script or HTML via the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to hijack the authentication of unspecified victims for requests that use the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

Sql injection

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4891

Vulnerability: The TYPO3 extension ke_yac (Yet Another Calendar) is affected by a SQL injection in versions before 1.1.2. Root cause per sources: improper handling of input in the extension allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact: remote exploitat...

CVE-2010-4890

CVE-2010-4890 affects the TYPO3 extension ke_yac (Yet Another Calendar) version prior to 1.1.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available sources indicate the affected component...

CVE-2010-4891

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4880

Multiple cross-site scripting XSS vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to inject arbitrary web script or HTML via the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...