Cross site scripting

IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...

CVE-2008-1216

IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...

CVE-2008-1216

IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...

CVE-2008-1211

Cross-site scripting XSS vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via 1 the type parameter in calendar.php and 2 the category parameter in calendarsearch.php. NOTE: the provenance of this information is unknown; the details are obtained...

[SECURITY] Fedora 8 Update: kronolith-2.1.7-1.fc8

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

[SECURITY] Fedora 8 Update: evolution-2.12.3-3.fc8

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora 7 Update: kronolith-2.1.7-1.fc7

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

Symantec the presence of a remote execution vulnerability 0day-vulnerability warning-the black bar safety net

EXP code: !-- Symantec BackupExec Calendar ControlPVCalendar. ocx BoF Exploit Vulnerability discovered by JJ Reyes of Secunia Research http://secunia.com/advisor... written by e. b. Tested on Windows XP SP2fully patched English, IE6 and IE7, PVCalendar. ocx version 10.0.0.17 Thanks to h. d. m. an...

Symantec Backup Exec Calendar ActiveX Control Multiple Vulnerabilities (SYM08-007)

The remote host contains the PVATLCalendar.PVCalendar.1 ActiveX control distributed with Symantec Backup Exec for Windows Servers. The installed version of that control reportedly contains two stack-based buffer overflows and allows for corrupting or saving malicious script code, and overwriting...

Symantec BackupExec Calendar Control (PVCalendar.ocx) BoF Exploit

No description provided by source. !-- Symantec BackupExec Calendar ControlPVCalendar.ocx BoF Exploit Vulnerability discovered by JJ Reyes of Secunia Research http://secunia.com/advisories/27885/ written by e.b...

Symantec BackupExec Calendar Control (PVCalendar.ocx) BoF Exploit

Exploit for unknown platform in category remote exploits ================================================================= Symantec BackupExec Calendar Control PVCalendar.ocx BoF Exploit ================================================================= Symantec BackupExec Calendar...

[SECURITY] Fedora 8 Update: wyrd-1.4.3b-1.fc8

wyrd is a ncurses frontend for the calendar application remind...

[SECURITY] Fedora 7 Update: wyrd-1.4.3b-1.fc7

wyrd is a ncurses frontend for the calendar application remind...

lotusquickr-xss.txt

description:Lotus Quickr, announced at Lotusphere 2007, is an evolution of Lotus QuickPlace ,The software use a weak xss filter that an attacker can bypass this xss filter. A remote user can create a specially crafted URL that, when loaded by a target user, will cause arbitrary scripting code to ...

Debian Security Advisory DSA 1056-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 1056-1. David Maciejak noticed that webcalendar, a PHP-Based multi-user calendar, returns different error messages on login attempts for an invalid password and a non-existing user, allowing remote attackers to gain...

Debian: Security Advisory (DSA-1267-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-970-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1279-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6365

Cross-site scripting XSS vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...