8602 matches found
JVN#20478978 Site Calendar 'mycaljp' vulnerable to cross-site scripting
Site Calendar 'mycaljp' is a calendar plugin for Geeklog, which is an open source content management system. Site Calendar 'mycaljp' contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the late...
Mandrake Security Advisory MDVSA-2009:167 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:167. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
RedHat Security Advisory RHSA-2009:1190
The remote host is missing updates announced in advisory RHSA-2009:1190. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...
Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability
I. Description The Palm Pre WebOS version 1.0.4 and below allows a remote attacker to execute arbitrary HTML code on the phone via certain applications. The affected applications involve the native email client via the notifications system as well as the native calendar application. The vendor ha...
Palm Pre WebOS 1.0.4 HTML Injection
I. Description The Palm Pre WebOS version 1.0.4 and below allows a remote attacker to execute arbitrary HTML code on the phone via certain applications. The affected applications involve the native email client via the notifications system as well as the native calendar application. The vendor ha...
PortalXP Teacher Edition 1.2 SQL Injection
PortalXP - Teacher Edition 1.2 Multiple SQL Injection Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/portalxp/files/portalxp%20-%20teacher%20edition/Version%201.2/PortalXP1-2.zip/download + SQL Injection - PoC's...
SA-CONTRIB-2009-047 - Calendar - Cross Site Scripting
The Calendar module enables Views module to display any Date module date field as a calendar. The module does not properly escape user input when displaying titles of content types that have Date fields. A user with permission to create new content types including via the Date module's Date Tools...
[Full-disclosure] Drupal 6 Date/Calendar XSS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Date of Original Vendor Contact: May 19, 2009 11:45 GMT -0400 Report Number: 8890 Author: Justin C. Klein Keane [email protected] Details of this vulnerability are also posted at the public URL...
RHEL 5 : tomcat (RHSA-2009:1164)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1164 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the Red Hat Security...
tomcat: XSS in Apache Tomcat calendar application
Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, relat...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)
This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
EzWeb Calendar Shell Upload
Hello Bro; EzWeb Calendar | Shell Upload Bug 1. Register Calendar 2. Add Calendar and Add FileShell 3. http://target/path/UserName/UploadedFiles/uploadedfile.php I'm Suggestions : Upload to ASP Shell Cyber-Warrior & Security | Bug Researchers Group Greetz : BARCOD3, BHDR, Cem, Asil Bey... You Tes...
ILIAS LMS <= 3.9.9/3.10.7 Arbitrary Edition/Info Disclosure Vulns
Exploit for unknown platform in category web applications ================================================================= ILIAS LMS WEB: http://www.ilias.de/ | |--DOWNLOAD: http://www.ilias.de/docu/goto.php?target=st22935&clientid=docu | |--DEMO: http://www.demo.ilias-support.com/ | |--CATEGORY...
Sql injection
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters in a calendar action, or 3 a search term in the search form...
CVE-2009-2451
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters in a calendar action, or 3 a search term in the search form...
DJ Calendar (DJcalendar.cgi TEMPLATE) File Disclosure Vuln
No description provided by source. Discovered by cibbao PoC: /cgi-bin/DJcalendar.cgi?TEMPLATE=/../../../../../../../etc/passwd sebug.net...
DJ Calendar (DJcalendar.cgi TEMPLATE) File Disclosure Vuln
Exploit for cgi platform in category web applications ========================================================== DJ Calendar DJcalendar.cgi TEMPLATE File Disclosure Vuln ========================================================== Discovered by cibbao PoC:...
DJ Calendar File Disclosure
Discovered by cibbao PoC: /cgi-bin/DJcalendar.cgi?TEMPLATE=/../../../../../../../etc/passwd...
