Secunia Research: Calendarix Basic Two SQL Injection Vulnerabilities

====================================================================== Secunia Research 25/08/2008 - Calendarix Basic Two SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

Design/Logic Flaw

calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the 1 year and 2 month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message...

CVE-2007-3258

calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the 1 year and 2 month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message...

CVE-2007-3258

CVE-2007-3258 affects Calendarix 0.7.20070307. The issue arises when remote attackers supply excessively large year/month values, causing mktime to receive negative values and triggering error messages that reveal the installation path. Impact is information disclosure (partial confidentiality). ...

CVE-2007-3182

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

CVE-2007-3183

Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters to calendar.php and the 3 search string to calsearch.php...

CVE-2007-3259

Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via 1 an invalid month parameter to calendar.php, 2 an invalid catview parameter to calweek.php in a week operation, 3 an invalid ycyear parameter to yearcal.php, or 4 a direct request to calfunctions.inc.php, which...

Design/Logic Flaw

Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via 1 an invalid month parameter to calendar.php, 2 an invalid catview parameter to calweek.php in a week operation, 3 an invalid ycyear parameter to yearcal.php, or 4 a direct request to calfunctions.inc.php, which...

Sql injection

Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters to calendar.php and the 3 search string to calsearch.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

CVE-2007-3182

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

CVE-2007-3183

Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters to calendar.php and the 3 search string to calsearch.php...

CVE-2007-3259

Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via 1 an invalid month parameter to calendar.php, 2 an invalid catview parameter to calweek.php in a week operation, 3 an invalid ycyear parameter to yearcal.php, or 4 a direct request to calfunctions.inc.php, which...

EUVD-2007-3174

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

CVE-2007-3183

CVE-2007-3183 affects Calendarix 0.7.20070307. When magic_quotes_gpc is disabled, input to calendar.php (month, year) and cal_search.php (search) is not properly sanitized, enabling remote attackers to inject arbitrary SQL commands. The entry notes three vectors: (1) month, (2) year in calendar.p...

CVE-2007-3182

Calendarix 0.7.20070307 is affected by multiple XSS flaws when PHP register_globals is On. The vulnerabilities allow remote attackers to inject script/HTML via calendar.php year and month parameters, and via cal_footer.inc.php leftfooter parameter (the ycyear parameter is covered by CVE-2006-1835...

CVE-2007-3259

CVE-2007-3259 concerns Calendarix 0.7.20070307, where remote attackers can obtain sensitive information via multiple vectors: (1) invalid month[] on calendar.php, (2) invalid catview[] on cal_week.php during week operations, (3) invalid ycyear[] on yearcal.php, and (4) direct requests to cal_func...

Calendarix calendar.php Multiple Parameter SQL Injection

The remote host is running Calendarix, a free web-based calendar application written in PHP. The version of Calendarix installed on the remote host fails to sanitize input to the 'month' and 'year' parameters of the 'calendar.php' script before using it in database queries. Provided PHP's...

Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities

netVigilance Security Advisory 38 Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities Description: Calendarix is a powerful and easy to use calendar based on PHP and MySQL. It has been developed with ease of use and quick access to information in mind. It provides the user wit...

Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 36 Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities Description: Calendarix is a powerful and easy to use calendar based on PHP and MySQL. It has been developed with ease of use and quick access to information in mind. It provides the user...