Calendar Express Multiple Flaws

The remote web server contains a PHP script which is vulnerable to a cross site scripting and SQL injection vulnerability. Description : The remote host is using Calendar Express, a PHP web calendar. A vulnerability exists in this version which may allow an attacker to execute arbitrary HTML and...

Calendar Express Multiple Flaws

The remote web server is using Calendar Express which is vulnerable to a cross site scripting and SQL injection vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

Sql injection

Eval injection vulnerability in cal.php in Light Weight Calendar LWC 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php...

CVE-2006-1252

Eval injection vulnerability in cal.php in Light Weight Calendar LWC 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php...

Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities

Invision Power Board IP.Board 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17144/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...

PT-2006-7515 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.0.0 through 4.0.6 Apache Tomcat versions 4.1.0 through 4.1.31 Apache Tomcat versions 5.0.0 through 5.0.30 Apache Tomcat versions 5.5.0 through 5.5.15 Description: The issue is related to a cross-site scripting XSS...

Light Weight Calendar 1.x - date Remote Code Execution

Light Weight Calendar 1.x - date Remote Code Execution !/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use...

Light Weight Calendar 1.x (date) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Light Weight Calendar 1.x date Remote Code Execution Vulnerability ==================================================================== !/usr/bin/perl Light Weight Calend...

Light Weight Calendar 1.x - 'date' Remote Code Execution

!/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use LWP::Simple; print...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...

CVE-2006-0980

Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...

CVE-2006-0980

CVE-2006-0980 concerns multiple XSS vulnerabilities in Jay Eckles CGI Calendar 2.7. The flaws allow an attacker to inject arbitrary web script or HTML via the year parameter in the scripts index.cgi and viewday.cgi. Affected component: CGI Calendar 2.7; entry points: index.cgi and viewday.cgi; ve...

cgiCal27XSS.txt

CGI Calendar XSS Vulnerability Software: CGI Calendar Version: 2.7 http://cgicalendar.sourceforge.net/ Description: an online calendar implemented using CGI technology Vulnerability: Cross-Site Scripting Exploit: /cgi-bin/calendar2/index.cgi?lang=en-us&mode=all&month=2&date=1&year=alert'xss';&db=...

Cross site scripting

Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0924

Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0924

Affected product : Brown Bear iCal 3.10. Vulnerability : Cross-site scripting (XSS) via the Calendar Text field when adding a new event. Impact : remote attackers can inject arbitrary web script or HTML. Root cause : insufficient sanitization/input handling in the Calendar Text field. Exploitatio...

CVE-2006-0924

Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...