8594 matches found
CVE-2007-4247
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...
CVE-2007-4247
CVE-2007-4247 concerns Windows Calendar on Microsoft Windows Vista. The vulnerability arises when processing a malformed ICS file, leading to a NULL dereference and a persistent application crash, i.e., a denial of service. Affected component is the Windows Calendar feature in Vista; exploitation...
CVE-2007-4247
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...
Microsoft Windows Calendar ICS文件处理拒绝服务漏洞
BUGTRAQ ID: 25201 Microsoft Windows Calendar是Vista系统中所捆绑的行程、日历软件。 Calendar的实现上存在漏洞，本地攻击者可能利用此漏洞导致Vista系统重启后崩溃。 如果在Calendar中设置了提醒的话，则导入畸形的ISC文件的话就可能触发空指针引用，导致Calendar崩溃，且在每次重启Vista后都会崩溃。 Microsoft Windows Calendar - Microsoft Windows Vista 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via 1 the who parameter to showuser; and other vectors involving 2 calendar mode, 3 bulletin board mode, 4 room names, and 5 uploaded file names...
CVE-2007-3822
Multiple cross-site scripting XSS vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via 1 the who parameter to showuser; and other vectors involving 2 calendar mode, 3 bulletin board mode, 4 room names, and 5 uploaded file names...
CVE-2007-3822
Multiple cross-site scripting XSS vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via 1 the who parameter to showuser; and other vectors involving 2 calendar mode, 3 bulletin board mode, 4 room names, and 5 uploaded file names...
webcit-multi.txt
Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...
Sql injection
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...
CVE-2007-3627
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...
CVE-2007-3627
CVE-2007-3627 concerns PHP Lite Calendar Express 2.2 with multiple SQL injection flaws exploitable via the cid parameter in login.php, auth.php, and subscribe.php. The vulnerability allows remote attackers to inject arbitrary SQL commands. The note states that month.php, year.php, week.php, and d...
CVE-2007-3627
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...
supercali-sql.txt
--==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
CVE-2007-3601
vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' calendar activities via a 1 home page or 2 event list view...
Code injection
vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' calendar activities via a 1 home page or 2 event list view...
CVE-2007-3601
Vulnerability CVE-2007-3601 affects vtiger CRM prior to 5.0.3. When a migrated build is used, remote authenticated users can read certain other users’ calendar activities via the home page or the event list view. The connected documents provide the affected product and the exposure method, but do...
CVE-2007-3601
vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' calendar activities via a 1 home page or 2 event list view...
Sql injection
SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...
CVE-2007-3582
CVE-2007-3582 refers to a SQL injection vulnerability in SuperCali PHP Event Calendar 0.4.0, exploitable through the o parameter in index.php, enabling remote attackers to execute arbitrary SQL commands. The core vulnerability is an input handling/validation issue in that parameter, allowing craf...