WEB Calendar Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================== WEB Calendar Remote Database Disclosure Vulnerability ===================================================== + Dork : search for it :p + Script : WEB Calendar vuln. in :...

Jax Calendar 1.34 - Remote Admin Access

Jax Calendar 1.34 - Remote Admin Access Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34...

Calendar Express 2.0 SQL Injection

Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.biz Exploit: POST...

WEB Calendar Database Disclosure

--------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p + Script : WEB Calendar vuln. in :...

Web Calendar - Remote Database Disclosure

Web Calendar - Remote Database Disclosure --------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search fo...

Calendar 2002 Proverbs Cross Site Scripting

======================================================================================== | Title : calendar ©2002 Proverbs Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

Jax Calendar 1.34 Remote Admin Access Exploit

Exploit for unknown platform in category web applications ============================================= Jax Calendar 1.34 Remote Admin Access Exploit ============================================= Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora...

WEB Calendar Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p...

ezscheduler Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================== ezscheduler Remote Database Disclosure Vulnerability ==================================================== + Dork : search for it :p + Script : ezscheduler vuln. in :...

Web Calendar - Remote Database Disclosure

--------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p + Script : WEB Calendar vuln. in :...

Jax Calendar 1.34 - Remote Admin Access

Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote Admin Access Exploit Author: Sora...

Calendar Express 2.0 - SQL Injection

Calendar Express 2.0 - SQL Injection Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.biz Exploit: POST...

Calendar Express 2.0 SQL Injection Vulnerability

No description provided by source. Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.bizhttp://www.1923turk.biz Exploit: POST...

Calendar Express 2.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ Calendar Express 2.0 SQL Injection Vulnerability ================================================ Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com...

Calendar Express 2.0 - SQL Injection

Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.biz Exploit: POST...

calendar 2002 Proverbs XSS Vulnerability

No description provided by source. ======================================================================================== | Title : calendar ©2002 Proverbs Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouagh...

PHP-Calendar configfile变量远程文件包含漏洞

CVECAN ID: CVE-2009-3702 php-Calendar是一款基于WEB的日历事务系统。 PHP-Calendar中存在多个绝对路径遍历漏洞，远程攻击者可以通过在提交给update08.php或update10.ph的configfile参数中的完整路径名导致包含并执行任意本地文件。以下是有漏洞的代码段： 36 elseif!empty$GET'configfile' 37 iffileexists$GET'configfile' 38 requireonce$GET'configfile'; PHP-Calendar 1.1 临时解决方法：...

CVE-2009-3702

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

Path traversal

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

CVE-2009-3702

CVE-2009-3702 affects PHP-Calendar 1.1, where the configfile parameter in update08.php and update10.php allows including arbitrary local files and can enable remote file inclusion in some environments (e.g., UNC paths, ftp/ftps/ssh2 URLs). The root cause is inadequate filtering of $GET['configfil...