ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. + Script : ASP Talk + Exploit Type : Multiple Exploits SQL/CSS + Google Dork : intitle:"ASP inline corporate calendar" inurl:.asp?id= + Contact : blackbeard-sql A.T hotmail.fr --//-- Exploit : 1Cross site scripting :...

ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= ASP Inline Corporate Calendar SQL/XSS Multiple Remote Vulnerabilities =======================================================================...

ASP Inline Corporate Calendar XSS / SQL Injection

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

GNOME Evolution '~/.evolution/mail/local'文件权限漏洞

Bugraq ID: 34921 CNCAN ID：CNCAN-2009051302 Evolution是一款个人和工作组信息管理解决方案，可使用在Linux和Unix操作系统下，集成Email、日历、会议安排、联系人管理等功能。 Evolution不安全建立文件权限，本地攻击者可以利用漏洞获得敏感信息。 Evolution默认本地邮件文件夹设置为755，imap mail文件夹为700，但是local,config, vfolder和view为755，可导致泄漏敏感信息 GNOME Evolution 2.24.5 + Ubuntu Ubuntu Linux 8.04 LTS spar...

OpenJDK calendar object deserialization allows privilege escalation (6734167)

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

WebCalendar Detection

This host is running WebCalendar, a PHP-based calendar application. OpenVAS Vulnerability Test $Id: webcalendardetect.nasl 5744 2017-03-28 07:25:23Z cfi $ WebCalendar Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can...

TugBoat Studio CMS Cross Site Scripting

=========================================================================================== Title : Cross-site Scripting XSS Vulnerability Software : TugBoat Studio CMS Vendor : http://tugboatcms.com/ Date : 26 April 2009 Indonesia Author : Vrs-hCk Contact : [email protected] Blog :...

OpenJDK calendar object deserialization allows privilege escalation (6734167)

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

Flat Calendar Bypass / Cross Site Scripting

Flat Calendar By-Pass / Html inj / XSS Multiple Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.04.09 Home: yildirimordulari.com / z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: Alem Hep Hacker Olm...

Flat Calendar 1.1 - 'add.php' HTML Injection

source: https://www.securityfocus.com/bid/34688/info Flat Calendar is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker t...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

Design/Logic Flaw

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

CVE-2008-6736 affects Flat Calendar 1.1. The issue: improper restriction of access to administrative functions, allowing remote attackers to add events via calAdd.php (reachable from admin/add.php) or delete events via admin/deleteEvent.php. Root cause described in sources as insufficient access ...

TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability

No description provided by source. //// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// --+-- Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar"...

TotalCalendar 2.4 - inc_dir Remote File Inclusion

TotalCalendar 2.4 - incdir Remote File Inclusion //// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event...

TotalCalendar 2.4 Remote File Inclusion

//// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar" Date: "20/04/2009" Time: "18:38" + Bugs :...

TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== TotalCalendar 2.4 incdir Remote File Inclusion Vulnerability =============================================================== Home Page : "http://www.simpoe.com/" Download :...

TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion

//// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar" Date: "20/04/2009" Time: "18:38" + Bugs :...