8594 matches found
SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz...
SuperCali PHP Event Calendar 0.4.0 - SQL Injection
SuperCali PHP Event Calendar 0.4.0 - SQL Injection --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==--...
SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability ==============================================================...
[SECURITY] Fedora Core 6 Update: evolution-data-server-1.8.3-7.fc6
The evolution-data-server package provides a unified backend for programs that work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...
[SECURITY] Fedora Core 5 Update: evolution-data-server-1.6.3-5.fc5
The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...
Important: Red Hat Security Advisory: evolution-data-server security update
Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...
[SECURITY] Fedora 7 Update: evolution-data-server-1.10.2-3.fc7
The evolution-data-server package provides a unified backend for programs that work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...
Evolution: User-assisted execution of arbitrary code
Background Evolution is the mail client of the GNOME desktop environment. Description Ulf Harnhammar from Secunia Research has discovered a format string error in the writehtml function in the file calendar/gui/e-cal-component-memo-preview.c. Impact A remote attacker could entice a user to open a...
CVE-2007-2908
Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...
myEvent version 1.6 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...
tomcat XSS in example webapps
Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...
ACal Web Calendar 2.2.6 Remote File Include Vulnerabilities
ACal Web Calendar 2.2.6 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/project/showfiles.php?groupid=105617 exploit:...
Thyme Calendar Event_View.PHP SQL注入漏洞
Thyme Calendar是一款基于PHP的WEB应用程序。 Thyme Calendar不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息。 问题是'EventView.PHP'脚本对用户提交的WEB参数缺少过滤,提交恶意SQL代码作为参数数据,可导致更改原来的SQL逻辑,获得敏感信息。 EXtrovert Software Thyme Calendar 1.3 目前没有解决方案提供: http://www.extrosoft.com/...
CVE-2007-2621
SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...
Sql injection
SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...
CVE-2007-2621
CVE-2007-2621 affects Thyme Calendar 1.3. The event_view.php script uses the eid parameter to build a database query without proper sanitization, enabling SQL injection. This allows remote attackers to run arbitrary SQL commands against the database. The vulnerability is documented across multipl...
CVE-2007-2621
SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...
Thyme Calendar 1.3 Remote SQL Injection Vulnerability
No description provided by source. Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION --------------------------...
Thyme Calendar 1.3 - SQL Injection
Thyme Calendar 1.3 - SQL Injection Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists i...
Thyme Calendar 1.3 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================== Thyme Calendar 1.3 Remote SQL Injection Vulnerability ===================================================== Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord...