Sql injection

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

CVE-2007-1845

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

CVE-2007-1845

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the searchtext parameter to a /search, or the 2 message parameter to b /calendar or c /subscribe...

CVE-2007-1646

Multiple cross-site scripting XSS vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the searchtext parameter to a /search, or the 2 message parameter to b /calendar or c /subscribe...

CVE-2007-1639

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

Unrestricted file upload

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

CVE-2007-1639

PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...

Gnome Evolution calendar format string vulnerability

Format string vulnerability on shared memo parsing...

**SubHub v2.3.0**

SubHub v2.3.0 Site: http://www.subhub.com/ & others that use this software Type of Expliot: XSS Version : 2.3.0 Discover: T--T Bug in : /search?searchtext=insert xss here /calendar/?message=insert xss here /subscribe?message=insert xss here - - - - - - - - - - - - - - - - Exploit POC...

DEBIAN-CVE-2007-1002

Format string vulnerability in the writehtml function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo...

Sql injection

Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 unspecified vectors to the a calendar and 2 search modules, and an 2 unspecified cookie when the user logs out...

n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.006 14-Mar-2007 Vendor: Mayflower GmbH, http://www.mayflower.de Affected Products: PHProjekt 5.2.0 Vulnerability: Privilege escalation Risk: HIGH Vendor communication: 2006/12/31 initial notification of Mayflower 2007/01/02...

WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================ WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vuln ================================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ /...

WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...

CVE-2007-1234

Multiple cross-site scripting XSS vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via 1 the sxYear parameter to calendar.php, 2 the search parameter to search.php, 3 the linkid parameter to redirect.php, or 4 the page parameter to calendarevents.php...

Design/Logic Flaw

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...