Joomla Appointment Calendar Persistent Xss Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla Appointment Calendar Persistent Xss Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

ApPHP Calendar XSS - CSRF

Vendor: ApPHP Affected versions: All Script: ApPHP Calendar URL: http://www.apphp.com/php-calendar/index.php Vulnerability type: XSS - CSRF Risk rating: Medium Exploit Attack: XSS - CSRF in calendar.php via POST Vulnerable file: calendar.class.php Vulnerable parameters: - categoryname -...

Feng Office Persistent XSS Vulnerability

Exploit for php platform in category web applications ======================================== Feng Office Persistent XSS Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

[SECURITY] Fedora 13 Update: sunbird-1.0-0.27.b2pre.fc13

Mozilla Sunbird is a cross-platform calendar application, built upon Mozilla Toolkit. It brings Mozilla-style ease-of-use to your calendar, without tying you to a particular storage solution...

Fedora Update for sunbird FEDORA-2010-13129

Check for the Version of sunbird OpenVAS Vulnerability Test Fedora Update for sunbird FEDORA-2010-13129 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Liferay Calendar exportFileName Path Manipulation

Minded Security Labs: Advisory MSA261009 Liferay Calendar "exportFileName" path manipulation Tested Versions: Liferay Enterprise Portal 4.4.2, other versions may also be affected. Minded Security ReferenceID: MSA261009 Credits: Discovery by Stefano Di Paola of Minded Security stefano.dipaola at...

CVE-2009-2696

Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter,...

Cross site scripting

Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter,...

CVE-2009-2696

Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter,...

CVE-2009-2696

Apache Tomcat contains a cross-site scripting (XSS) vulnerability in the calendar example (jsp/cal/cal2.jsp). A remote attacker can inject script via the time parameter due to improper validation of user input (related to invalid HTML). The issue is documented in a GitHub advisory (GHSA-J788-FX57...

Joomla PBBooking 1.0.4_3 SQL Injection

PBBooking 1.0.43 Joomla Component Multiple Blind SQL Injection Name PBBooking Vendor http://sourceforge.net/projects/pbbooking/ Versions Affected 1.0.43 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-29 X. INDEX ...

tomcat: missing fix for CVE-2009-0781

Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter,...

[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13

Mozilla Sunbird is a cross-platform calendar application, built upon Mozilla Toolkit. It brings Mozilla-style ease-of-use to your calendar, without tying you to a particular storage solution...

[SECURITY] Fedora 12 Update: sunbird-1.0-0.23.20090916hg.fc12

Mozilla Sunbird is a cross-platform calendar application, built upon Mozilla Toolkit. It brings Mozilla-style ease-of-use to your calendar, without tying you to a particular storage solution...

Fedora Update for sunbird FEDORA-2010-11361

Check for the Version of sunbird OpenVAS Vulnerability Test Fedora Update for sunbird FEDORA-2010-11361 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-4954

SQL injection vulnerability in the Versatile Calendar Extension VCE skcalendar extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4954

CVE-2009-4954 describes an SQL injection in the TYPO3 VCE plug-in Versatile Calendar Extension (sk_calendar) before version 0.3.4. Affected software: TYPO3 environment using sk_calendar prior to 0.3.4. Root cause: improper handling of input in the extension, enabling an attacker to inject arbitra...

CVE-2009-4954

SQL injection vulnerability in the Versatile Calendar Extension VCE skcalendar extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging...

CVE-2010-0914

CVE-2010-0914 affects Oracle Sun Convergence 1.0. The Sun Convergence entry shows the vulnerability is exposed over HTTP and targets Mail, Calendar, Address Book, and Instant Messaging. The NVD entry lists an overall CVSS v2 base score of 5.0 (Network vector, Confidentiality impact Partial, other...