CVE-2005-2461

Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 date parameter...

CVE-2005-2461

CVE-2005-2461 concerns Kayako LiveResponse 2.x, where the calendar feature exposes multiple SQL injection flaws exploitable via the (1) year or (2) date parameters. The NVD entry notes remote, unauthenticated access with network vector and low attack complexity, leading to potentially partial con...

phpCommunityCalendar 4.0.3 - Cross-Site Scripting SQL Injection

phpCommunityCalendar 4.0.3 - Cross-Site Scripting SQL Injection author : X0r1 release : 23.05.06 software : http://www.appideas.com/ googledork : "Calendar programming by AppIdeas.com" filetype:php XSS: http://SERVER/PATH/week.php?LoName=alert'XSS' http://SERVER/PATH/month.php?LoName=alert'XSS'...

phpCommunityCalendar <= 4.0.3 Multiple (XSS/SQL) Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCommunityCalendar author : X0r1 release : 23.05.06 software : http://www.appideas.com/ googledork : "Calendar programming by AppIdeas.com" filetype:php XSS:...

phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection

author : X0r1 release : 23.05.06 software : http://www.appideas.com/ googledork : "Calendar programming by AppIdeas.com" filetype:php XSS: http://SERVER/PATH/week.php?LoName=alert'XSS' http://SERVER/PATH/month.php?LoName=alert'XSS' http://SERVER/PATH/event.php?AddressLink="alert'XSS'" SQL...

[SECURITY] [DSA 1056-1] New webcalendar packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 1056-1 [email protected] http://www.debian.org/security/ Martin Schulze May 15th, 2006 http://www.debian.org/security/faq -...

DSA-1056-1 webcalendar - verbose error message

Bulletin has no description...

ACal embed/day.php path Parameter Remote File Inclusion

The remote host is running ACal, an open source, web-based event calendar written in PHP. The version of ACal installed on the remote host fails to sanitize user-supplied input to the 'path' parameter of the 'embed/day.php' script before using it in PHP 'include' functions. Provided PHP's...

Cross site scripting

Cross-site scripting XSS vulnerability in calendarnew.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2292

Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the 1 type parameter in a calendarnew.asp and b default.asp, and 2 ID parameter in c calendardetail.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-2291

Cross-site scripting XSS vulnerability in calendarnew.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the 1 type parameter in a calendarnew.asp and b default.asp, and 2 ID parameter in c calendardetail.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-0027

Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted 1 vCal or 2 iCal Calendar properties...

Microsoft Exchange Calendar code execution

Server doesn't properly handles iCal and vCal properties of MIME message...

CVE-2006-2291

Cross-site scripting XSS vulnerability in calendarnew.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2292

Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the 1 type parameter in a calendarnew.asp and b default.asp, and 2 ID parameter in c calendardetail.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-2292

CVE-2006-2292 involves multiple SQL injection vulnerabilities in IA-Calendar. The affected components are the web interfaces calendar_new.asp (type parameter) and default.asp, and calendar_detail.asp (ID parameter). The underlying flaw allows remote attackers to craft input that could execute arb...

CVE-2006-2291

The CVE-2006-2291 entry describes a cross-site scripting (XSS) vulnerability in IA-Calendar, specifically in the calendar_new.asp page where the TypeName1 parameter can be exploited to inject arbitrary web script or HTML. The available details identify the affected component as IA-Calendar and th...

CVE-2006-0027

Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted 1 vCal or 2 iCal Calendar properties...

CVE-2006-2265

Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...