PHP Lite Calendar Express 2.2 - login.php?cid SQL Injection

PHP Lite Calendar Express 2.2 - login.php?cid SQL Injection source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful...

[SA16333] Jax Calendar Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 766-1 [email protected] http://www.debian.org/security/ Martin Schulze July 26th, 2005 http://www.debian.org/security/faq -...

DSA-746-1 phpgroupware - remote command execution

Bulletin has no description...

ASPinline.txt

--Alt-Boundary-17597.19317787 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium Th...

[Full-disclosure] Advisory 06/2005: Geeklog SQL Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Geeklog SQL Injection Vulnerability Release Date: 2005/07/05 Last Modified: 2005/07/05 Author: Stefan Esser [email protected] Application: Geeklog = 1.3.11 Severity: An...

WebCalendar Detection

This script detects whether the remote host is running WebCalendar and extracts version numbers and locations of any instances found. WebCalendar is an open source web calendar application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18572;...

PHP calendar functions buffer overflow

Buffer overflow in calendar functions, e.g. JDToGregorian on large integer...

[Full-disclosure] PHP: Calendar Buffer Overflow

There are some nice sprintf's in "extcalendarcalendar.c": 'sprintfdate, "i/i/i", month, day, year;' Example exploitation 4.3.11: ?php JDToGregorian999999999; ? Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia -...

CVE-2005-1756

Cross-site scripting XSS vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields...

Immunity Canvas: IPSWITCH_CAL

Name| ipswitchcal ---|--- CVE| CVE-2005-1252 Exploit Pack| CANVAS Description| Ipswitch Calendar Directory Traversal Notes| CVE Name: CVE-2005-1252 VENDOR: IPSwitch Reference: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=242 VersionsAffected: IMail 8.13 up to 8.2p1...

CVE-2005-1481

The CVE-2005-1481 entry maps to multiple SQL injection flaws in Aaron Outpost’s ASP Inline Corporate Calendar. OpenVAS details describe both defer.asp and details.asp as vulnerable endpoints taking an Event_ID parameter, enabling remote attackers to inject SQL commands. The underlying issue is im...

CVE-2005-1481

Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the EventID parameter to 1 defer.asp or 2 details.asp...

CVE-2003-1185

Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including 1 Admin-Center, 2 Announcements, 3 admin/calendar.php, and 4 showevent.php...

[HSC Security Group] ASP Inline Corporate Calendar SQL injection

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium The Corporate Calendar is a nice asp script to manage a calendar shared by users. It has been downloaded by thousands people, and it is considered...

ASP Inline Corporate Calendar 3.6.3 - 'Details.asp' SQL Injection

source: https://www.securityfocus.com/bid/13487/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

[SA15239] ASP Inline Corporate Calendar "Event_ID" SQL Injection

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: ASP Inline Corporate Calendar "EventID" SQL Injection...

ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection

source: https://www.securityfocus.com/bid/13485/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

CVE-2005-1397

SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-1397

PHP-Calendar is affected by a SQL injection in includes/search.php prior to version 0.10.3. The vulnerability allows remote attackers to manipulate SQL queries via unsanitized input in search-related parameters (vectors not explicitly disclosed). Impact per sources: potential exposure of data and...