CVE-2004-0742

The CVE-2004-0742 entry affects Sun Java System Portal Server 6.2 (formerly Sun ONE). The vulnerability allows remote authenticated users to gain Calendar Server privileges and modify Calendar data by changing display options to a non-default view. The primary affected component is the Calendar/D...

CVE-2004-0742

Sun Java System Portal Server 6.2 formerly Sun ONE allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view...

Sun Java System Portal Server fails to properly handle changes to display options

Overview There is a vulnerability in the Sun Java System Portal Server, which could allow a remote, authenticated user to gain access to the administrative credentials of the Calendar server. Description The Sun Java System Portal Server is a content management system that provides centralized...

Solaris 2.6 (x86) : 105567-13

CDE 1.2x86: calendar manager patch. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 7 (x86) : 107023-11

CDE 1.3x86: Calendar Manager patch. Date this patch was last updated by Sun : Sep/21/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 104976-08

OpenWindows 3.5.1: Calendar Manager patch. Date this patch was last updated by Sun : Mar/08/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Topic Calendar 1.0.1 - Calendar_Scheduler.php Cross-Site Scripting

Topic Calendar 1.0.1 - CalendarScheduler.php Cross-Site Scripting source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates

ZH2004-05SA security advisory: Sql Injection Vulnerability in BosDates Published: 11 february 2004 Released: 11 february 2004 Name: BosDates Affected Systems: current and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected] Vendor:...

BosDev BosDates 3.x - SQL Injection

source: https://www.securityfocus.com/bid/9639/info An SQL injection vulnerability has been reported to affect BosDates calendar system. The issue arises due to insufficient sanitization of user supplied data. As a result of this issue an attacker could modify the logic and structure of database...

CVE-2004-0016

The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files...

CVE-2004-0017

PhpGroupWare (calendar and infolog modules, version 0.9.14 era) is affected by SQL injection vulnerabilities due to non-escaping of user-supplied data, enabling remote attackers to influence SQL query logic. Public sources (Debian DSA-419, OpenVAS entries, and NVD reference) confirm CAN-2004-0017...

DSA-419 phpgroupware - missing filename sanitising, SQL injection

Bulletin has no description...

vbulletinSQL.txt

vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...

CVE-2003-0738

The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service crash via a long year parameter...

CVE-2003-0737

The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime in TimeZone.php of the Pear library...

CVE-2003-0735

SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter...

CVE-2003-0735

CVE-2003-0735 affects phpWebSite 0.9.x and earlier, specifically the Calendar module. The root cause is insufficient input validation for calendar events, allowing SQL injection via user-controlled input (e.g., cal_template) and potentially enabling execution of arbitrary SQL with the PHPWebSite ...

CVE-2003-0735

SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter...

CVE-2003-0737

CVE-2003-0737 : The calendar module of phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite by triggering an error from localtime() in TimeZone.php (Pear library) via an invalid year. The issue is web-accessible (network vector) with no authentication, an...