CVE-2008-5737

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Unfixed XSS vulnerability at www.rtve.es

Security researcher OleMoudi, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting www.rtve.es, which at the time of submission ranked 1906 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Calendar Script 1.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- Calendar Script v1.1 Admin Login Bypass Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 File...

Calendar Script 1.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Calendar Script 1.1 Auth Bypass SQL Injection Vulnerability ============================================================= -----------------------------------------------------...

Calendar Script 1.1 Insecure Cookie Handling

START 0x01 Informations: Script : Calendar Script v1.1 Download : http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 Vulnerability : Insecure Cookie Handling Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS, x0r, emgent...

Calendar Script 1.1 - Authentication Bypass

----------------------------------------------------- Calendar Script v1.1 Admin Login Bypass Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 File Vuln "index.php" code details...

Calendar Script 1.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ========================================================== Calendar Script 1.1 Insecure Cookie Handling Vulnerability ========================================================== START 0x01 Informations: Script : Calendar Script v1.1 Downloa...

Calendar Script 1.1 - Insecure Cookie Handling

START 0x01 Informations: Script : Calendar Script v1.1 Download : http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 Vulnerability : Insecure Cookie Handling Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS, x0r, emgent...

MyCal Personal Events Calendar Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

No description provided by source. MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit:...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar - Database Disclosure MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== MyCal Personal Events Calendar mycal.mdb Database Disclosure Vuln =================================================================== MyCal Personal Events Calendar...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

evCal Events Calendar - Database Disclosure

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...

CF Calendar SQL Injection

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : CFCALENDAR download : NULL Demo : http://www.cfmsource.com/calendar/displaycalendar.cfm Exploits : --=SQL INJECTION=--...

CVE-2008-5353

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

CVE-2008-5353

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

CVE-2008-5353

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

OpenJDK calendar object deserialization allows privilege escalation (6734167)

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...

OpenJDK calendar object deserialization allows privilege escalation (6734167)

The Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and...