CVE-2009-0501

CVE-2009-0501 affects Moodle’s Calendar Export feature in Moodle 1.8.x before 1.8.8 and 1.9.x before 1.9.4. The root cause is a Calendar Export flaw that allows an attacker to obtain usernames (sensitive information) and perform brute-force attacks on user accounts. Exploitation vectors are not d...

CVE-2009-0501

Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "brute force attacks on user accounts" via unknown vectors...

CVE-2009-0501

Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "brute force attacks on user accounts" via unknown vectors...

[Full-disclosure] PHP-Calendar SQL Credential Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Risk: Moderate Exploitable: Remotely Vulnerability: Information disclosure Version: Multiple Versions PHP-Calendar http://www.php-calendar.com was "written for a college social group at Northeastern University to keep track of events, etc. We...

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp Username : ' o...

Web-Calendar Lite 1.0 - Authentication Bypass

Web-Calendar Lite 1.0 - Authentication Bypass ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp...

Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Web-Calendar Lite 1.0 Auth Bypass SQL Injection Vulnerability =============================================================== Script :Web-Calendar Lite 1.0 Site...

Web-Calendar Lite 1.0 - Authentication Bypass

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp Username : ' or '1=1 Password : ' or '1=1 Ä°ÅŸini...

OpenJDK calendar object deserialization allows privilege escalation (6734167)

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

OpenJDK calendar object deserialization allows privilege escalation (6734167)

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

Calendar Script 1.1 SQL Injection

----------------------------------------------------- Calendar Script v1.1 Admin Login Bypass Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 File Vuln "index.php" code details...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...

CVE-2008-5737

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Authentication flaw

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 can be exploited by remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. This is the explicit vulnerability described in the CVE-2008-5738 records (NVD) with a high impact score; no remediation ...

CVE-2008-5737

CVE-2008-5737 is a SQL injection vulnerability affecting Nodstrum MySQL Calendar (versions 1.1 and 1.2). The flaw occurs in index.php where the username parameter can be manipulated to execute arbitrary SQL commands, enabling an attacker to access or modify data. The CVSSv2 base score is 7.5 (Hig...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...