nuked-SQL.txt

+nuked-klan +www.nuked-klan.org +founded By Moroccan Security Team +special 10x to:CiM-TeaM,Esp!onLeRaVaGe,nabil,Dranzelz,SnIpErSA,www.lezr.com +exemple +http://target/index.php?file=Calendar&m=sql&y=2006 +have nice day...

CVE-2006-1508

Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...

CVE-2006-1508

Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...

CVE-2006-1508

CVE-2006-1508 affects MH Software Connect Daily Web Calendar Software (version 3.2.9 and earlier). The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML via various query parameters across multiple pages: calendar_id, style_s...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 id, 3 num, 4 board, 5 cat, 6 real, 7 viewcat, 8 img, or 9 curcatname parameter in cgi-bin/index.cgi, or 10 vsSD parameter in...

CVE-2006-1422

SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2006-1419

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

Sql injection

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

Sql injection

SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2006-1427

Multiple cross-site scripting XSS vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 id, 3 num, 4 board, 5 cat, 6 real, 7 viewcat, 8 img, or 9 curcatname parameter in cgi-bin/index.cgi, or 10 vsSD parameter in...

CVE-2006-1419

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

CVE-2006-1422

SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2006-1422

CVE-2006-1422 affects PHP Booking Calendar 1.0c and earlier. The vulnerability is an SQL injection in details_view.php via the event_id parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with network access, low attac...

CVE-2006-1419

CVE-2006-1419 describes an SQL injection in the Calendar module of nuked-klan, affecting 1.7.5 and earlier. The vulnerability allows remote attackers to inject arbitrary SQL via the m parameter to index.php, potentially impacting data integrity. The available records confirm the affected software...

CVE-2006-1427

CVE-2006-1427 involves multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier. The affected component is the web application’s CGI interfaces, specifically cgi-bin/index.cgi (parameters: action, id, num, board, cat, real, viewcat, img, curcatname) and /mods/calendar/i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 allwords or 2 oneword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party informati...

CVE-2006-1401

CVE-2006-1401 affects Calendar Express 2.2. The issue is multiple XSS in search.php exploitable via the allwords and oneword parameters, allowing remote script/HTML injection. The connected documents confirm the affected component and vulnerability class but do not provide explicit exploit detail...

XSS in Calendar Event 3.0

Advisory: XSS in Calendar Event 3.0 Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php http://demo.comdevweb.com/calendar/index.php?calview=year&year=2007"scriptalert/script" -------------------------- Cyber Lords Team...

[SA19393] Calender Express Cross-Site Scripting Vulnerability

TITLE: Calender Express Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19393 VERIFY ADVISORY: http://secunia.com/advisories/19393/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Calendar Express 2.x http://secunia.com/product/5508/ DESCRIPTION:...