Echo Security Advisory 2006.36

ECHO.OR.ID ECHOADV36$2006 --------------------------------------------------------------------------- ECHOADV36$2006 ExtCalendar...

popupSQL.txt

By:BoNy-m [email protected] ---------------------- example:- /popup/calendaryear.php?rentalid=SQL Injection...

[ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities

ECHO.OR.ID ECHOADV36$2006 --------------------------------------------------------------------------- ECHOADV36$2006 ExtCalendar == v2.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Ahmad Maulana a.k.a Matdhule Date : Jul...

CVE-2006-3257

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...

CVE-2006-3257

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...

calendarSQL.txt

Produit : Calendar Provided by Codewalkers Site officiel : http://Calendar.codewalkers.com Vulnérabilité : SQL Injection Exploitation : /calendar.php?display=event&id=SQL Crédit : Silitix - www.Silitix.com Avis de sécurité original : www.Silitix.com/calendar-cws.php Greetz : Simo64 / MSRT /...

Calendar ( Provided by Codewalkers ) - SQL Injection

Produit : Calendar Provided by Codewalkers Site officiel : http://Calendar.codewalkers.com Vulnйrabilitй : SQL Injection Exploitation : /calendar.php?display=event&id=SQL Crйdit : Silitix - www.Silitix.com Avis de sйcuritй original : www.Silitix.com/calendar-cws.php Greetz : Simo64 / MSRT /...

[Full-disclosure] Calendar ( Provided by Codewalkers ) - SQL Injection

Produit : Calendar Provided by Codewalkers Site officiel : http://Calendar.codewalkers.com Vulnrabilit : SQL Injection Exploitation : /calendar.php?display=event&id=SQL Crdit : Silitix - www.Silitix.com Avis de scurit original : www.Silitix.com/calendar-cws.php Greetz : Simo64 / MSRT / VeNoM630 /...

PHP Event Calendar 4.2 - SQL Injection

PHP Event Calendar 4.2 - SQL Injection source: https://www.securityfocus.com/bid/18593/info PHP Event Calendar is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...

PHP Event Calendar 4.2 - SQL Injection

source: https://www.securityfocus.com/bid/18593/info PHP Event Calendar is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise...

CVE-2006-3025

Cross-site scripting XSS vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3025

The CVE-2006-3025 entry concerns a cross-site scripting (XSS) flaw in Cal.PHP3 of Chris Lea Lucid Calendar 0.22. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified parameters. NVD lists a CVSS v2 base score of 6.8 (NETWORK, MEDIUM) with partial impact on con...

CVE-2006-2973

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

Sql injection

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

CVE-2006-2973 involves multiple SQL injection vulnerabilities in month.php of PHP Lite Calendar Express 2.2 . The issue allows remote attackers to execute arbitrary SQL commands via the (1) and (2) parameters, potentially affecting the application’s database through the affected page. The CVSS ...

calexp2.txt

====================================== DISCOVERED BY: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ====================================== Example: /print/month.php?cid=&catid=SQL /print/month.php?cid=SQ...

Calendar Express 2 SQL injection

====================================== DISCOVERED BY: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ====================================== Example: /print/month.php?cid=&catid=SQL /print/month.php?cid=SQ...

Calendar Express 2.2 - month.php SQL Injection

Calendar Express 2.2 - month.php SQL Injection source: https://www.securityfocus.com/bid/18314/info Calendar Express is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

Calendar Express 2.2 - 'month.php' SQL Injection

source: https://www.securityfocus.com/bid/18314/info Calendar Express is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise...