CVE-2010-4795

CVE-2010-4795: A SQL injection vulnerability affects the Joomla! JS Calendar (com_jscalendar) component versions 1.5.1 and 1.5.4. The flaw allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. Underlying issue is improper handling of u...

CVE-2010-4794

Summary (CVE-2010-4794) : The Joomla! component JoomlaSeller JS Calendar (com_jscalendar) for Joomla! versions 1.5.1 and 1.5.4 contains multiple XSS vulnerabilities. An attacker can inject arbitrary JavaScript/HTML via the (1) month and (2) year parameters in a jscalendar action to index.php, ena...

CVE-2010-4795

SQL injection vulnerability in the JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the evid parameter in a details action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-4794

Multiple cross-site scripting XSS vulnerabilities in the JoomlaSeller JS Calendar comjscalendar component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a jscalendar action to index.php. NOTE: some of these detail...

php <5.3.6 Calendar扩展SdnToJulian函数整数溢出漏洞

No description provided by source...

Cross-site Scripting (XSS) Vulnerability in AJAX Calendar

High-Tech Bridge SA Security Research Lab has discovered vulnerability in AJAX Calendar which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in AJAX Calendar The vulnerability exists due to input sanitation error in the "y" parameter in...

CVE-2011-1666

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...

Path traversal

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...

Multiple Vendors Calendar Manager RPC Service Memory Corruption (CVE-2010-4435)

A memory corruption vulnerability has been reported in IBM's, Hewlett-Packard's and Sun Microsystems calendar manager product. The vulnerability is due to an error in the Calendar Manager Service Daemon rpc.cmsd when handling RPC requests...

Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by accessing an entry in a calendar, aka SPR MZHA7SEBJX...

CVE-2009-5060

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by accessing an entry in a calendar, aka SPR MZHA7SEBJX...

CVE-2011-1466

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

Integer overflow

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

CVE-2011-1466

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

CVE-2011-1466

CVE-2011-1466 : An integer overflow in the Calendar extension’s SdnToJulian function on PHP before 5.3.6 can be exploited with a large first argument to cal_from_jd, enabling context-dependent denial of service (application crash). Affected product/version: PHP prior to 5.3.6 (as cited in the vul...

CVE-2011-1466

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

HP-UX Update for CDE Calendar Manager HPSBUX02628

Check for the Version of CDE Calendar Manager OpenVAS Vulnerability Test HP-UX Update for CDE Calendar Manager HPSBUX02628 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

HP-UX Update for CDE Calendar Manager HPSBUX02628

The remote host is missing an update for the CDE Calendar Manager packages announced via the referenced advisory. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Leaked Blackberry Doc Blows Cover On 4.0 Release

Another ground breaking mobile device release, another embarrassing leak. Mobile device maker Research in Motion found itself responding to the publication of documentation for its much anticipated Blackberry Internet Service BIS 4.0 on Thursday. In a story reminiscent of the now famous faux pas ...

HP-UX PHSS_41174 : HP-UX Running CDE Calendar Manager, Remote Execution of Arbitrary Code (HPSBUX02628 SSRT090183 rev.1)

s700800 11.23 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running CDE Calendar Manager. The vulnerability could be exploited remotely to execute arbitrary code. References: CVE-2010-4435, ZDI-CAN-561. %NASLMINLEVEL 70300 C Tenable Network Security,...