webbiscuitsec-rfi.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

eventscal-rfi.txt

Events Calendar 1.1 Remote File Inclusion Vulnerability ======================================================== Author: kevin mitnick tunisianblackhat team = = Home : http://tunisianblackhat.com = = email: kevinmitnickAlive.fr = = ========================================================= script ...

Events Calendar 1.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= Events Calendar 1.1 Remote File Inclusion Vulnerability ======================================================= Events Calendar 1.1 Remote File Inclusion Vulnerability...

Events Calendar 1.1 Remote File Inclusion Vulnerability

No description provided by source. Events Calendar 1.1 Remote File Inclusion Vulnerability ======================================================== Author: kevin mitnick tunisianblackhat team = = Home : http://tunisianblackhat.com = = email: kevinmitnickAlive.fr = =...

phpcal-xss.txt

============================================================== PHP Calendar Script Remote XSS Permanent Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

events Calendar 1.1 - Remote File Inclusion

Events Calendar 1.1 Remote File Inclusion Vulnerability ======================================================== Author: kevin mitnick tunisianblackhat team = = Home : http://tunisianblackhat.com = = email: kevinmitnickAlive.fr = = ========================================================= script ...

MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection

/ / / / / | | | | / / ||| | | | | | | | | | / | | | | | | || | / | | || | / / / |/ / / / MapCal - The Mapping Calendar v. 0.1 Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: MapCal - The Mapping Calendar site: http://mapcal.sourceforge.net...

PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload

PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...

CVE-2008-3886

Multiple cross-site scripting XSS vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the inactive parameter in a tasks action, 2 the date parameter in a calendar dayview action, 3 the callback parameter in a public calendar action,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the inactive parameter in a tasks action, 2 the date parameter in a calendar dayview action, 3 the callback parameter in a public calendar action,...

CVE-2008-3886

Multiple cross-site scripting XSS vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the inactive parameter in a tasks action, 2 the date parameter in a calendar dayview action, 3 the callback parameter in a public calendar action,...

Cross site scripting

Cross-site scripting XSS vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving 1 month, 2 day, and 3 year fields...

CVE-2008-3849

Cross-site scripting XSS vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving 1 month, 2 day, and 3 year fields...

CVE-2008-3575

PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgsLanguage parameter, a different vector than CVE-2006-4477 and CVE-2004-0132...

Sql injection

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

CVE-2008-3452

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

CVE-2008-3452

Summary of CVE-2008-3452 : A SQL injection vulnerability exists in the Calendar module of eNdonesia 8.4, exploitable via the loc_id parameter in the list_events action to mod.php. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 6.8 (Medium) w...

CVE-2008-3452

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

endonesia-sql.txt

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

eNdonesia 8.4 (Calendar Module) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...