Lucene search
+L

8594 matches found

seebug.org
seebug.org
added 2007/07/04 12:0 a.m.20 views

SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/07/03 12:0 a.m.16 views

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

SuperCali PHP Event Calendar 0.4.0 - SQL Injection --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

0.2AI score
SaveExploits0
0day.today
0day.today
added 2007/07/03 12:0 a.m.93 views

SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability ==============================================================...

7.1AI score
SaveExploits0
Fedora
Fedora
added 2007/06/28 1:47 a.m.16 views

[SECURITY] Fedora Core 6 Update: evolution-data-server-1.8.3-7.fc6

The evolution-data-server package provides a unified backend for programs that work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

2.1AI score
SaveExploits0
Fedora
Fedora
added 2007/06/28 1:47 a.m.13 views

[SECURITY] Fedora Core 5 Update: evolution-data-server-1.6.3-5.fc5

The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

1.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/06/25 1:39 p.m.30 views

Important: Red Hat Security Advisory: evolution-data-server security update

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

6.8CVSS6AI score0.03122EPSS
SaveExploits0References2
Fedora
Fedora
added 2007/06/16 1:23 p.m.12 views

[SECURITY] Fedora 7 Update: evolution-data-server-1.10.2-3.fc7

The evolution-data-server package provides a unified backend for programs that work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

2.2AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/06/06 12:0 a.m.33 views

Evolution: User-assisted execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Description Ulf Harnhammar from Secunia Research has discovered a format string error in the writehtml function in the file calendar/gui/e-cal-component-memo-preview.c. Impact A remote attacker could entice a user to open a...

6.8CVSS7AI score0.03364EPSS
SaveExploits0
NVD
NVD
added 2007/05/30 10:30 a.m.20 views

CVE-2007-2908

Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...

4.3CVSS5.7AI score0.01771EPSS
SaveExploits1References6
securityvulns
securityvulns
added 2007/05/29 12:0 a.m.51 views

myEvent version 1.6 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...

5CVSS0.1AI score0.01435EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/05/21 12:13 p.m.7 views

tomcat XSS in example webapps

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

4.3CVSS5.8AI score0.72168EPSS
SaveExploits1References4
securityvulns
securityvulns
added 2007/05/19 12:0 a.m.60 views

ACal Web Calendar 2.2.6 Remote File Include Vulnerabilities

ACal Web Calendar 2.2.6 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/project/showfiles.php?groupid=105617 exploit:...

0.8AI score
SaveExploits0
seebug.org
seebug.org
added 2007/05/14 12:0 a.m.25 views

Thyme Calendar Event_View.PHP SQL注入漏洞

Thyme Calendar是一款基于PHP的WEB应用程序。 Thyme Calendar不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息。 问题是'EventView.PHP'脚本对用户提交的WEB参数缺少过滤,提交恶意SQL代码作为参数数据,可导致更改原来的SQL逻辑,获得敏感信息。 EXtrovert Software Thyme Calendar 1.3 目前没有解决方案提供: http://www.extrosoft.com/...

7.1AI score
SaveExploits0
NVD
NVD
added 2007/05/11 4:19 p.m.14 views

CVE-2007-2621

SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...

7.5CVSS8.4AI score0.02493EPSS
SaveExploits1References6
Prion
Prion
added 2007/05/11 4:19 p.m.18 views

Sql injection

SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...

7.5CVSS8.8AI score0.02493EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2007/05/11 4:0 p.m.45 views

CVE-2007-2621

CVE-2007-2621 affects Thyme Calendar 1.3. The event_view.php script uses the eid parameter to build a database query without proper sanitization, enabling SQL injection. This allows remote attackers to run arbitrary SQL commands against the database. The vulnerability is documented across multipl...

7.5CVSS8.4AI score0.02493EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2007/05/11 4:0 p.m.21 views

CVE-2007-2621

SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...

8.4AI score0.02493EPSS
SaveExploits1References6
seebug.org
seebug.org
added 2007/05/11 12:0 a.m.32 views

Thyme Calendar 1.3 Remote SQL Injection Vulnerability

No description provided by source. Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION --------------------------...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/05/10 12:0 a.m.15 views

Thyme Calendar 1.3 - SQL Injection

Thyme Calendar 1.3 - SQL Injection Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists i...

0.6AI score
SaveExploits0
0day.today
0day.today
added 2007/05/10 12:0 a.m.139 views

Thyme Calendar 1.3 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Thyme Calendar 1.3 Remote SQL Injection Vulnerability ===================================================== Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord...

7.1AI score
SaveExploits0
Rows per page
Query Builder