12 matches found
EUVD-2008-2424
Malware in sbrugna...
EUVD-2006-3091
Malware in sbrugna...
CVE-2008-2429
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
Sql injection
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
CVE-2008-2429
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
CVE-2008-2429
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
CVE-2008-2429
Summary of CVE-2008-2429 (Calendarix Basic): Two SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 affect the catsearch and catview parameters (cal_search.php and cal_cat.php). The vulnerabilities arise because user input is not properly sanitized before being used in SQL queries, en...
CVE-2008-2429: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
CVE-2006-3094
Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 calevent.php and 2 calpopup.php...
CVE-2006-3094
CVE-2006-3094 affects Calendarix Basic 0.7.20060401 and earlier. The vulnerability is an SQL injection in the id parameter of cal_event.php and cal_popup.php when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands. This is evidenced by multiple public adviso...
CVE-2006-3094
Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 calevent.php and 2 calpopup.php...
CVE-2006-3094: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 calevent.php and 2 calpopup.php...