108 matches found
Calendarix <= 0.7.20060401 SQL Injection
Binary data 3654.prm...
Cross site scripting
Cross-site scripting XSS vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter...
CVE-2006-1835
Cross-site scripting XSS vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter...
CVE-2006-1835
CVE-2006-1835: XSS in Calendarix yearcal.php via the ycyear parameter. Remote attackers can inject arbitrary script/HTML. Affected: Calendarix (yearcal.php). Impact: partial integrity; low severity (CVSS v2 base 2.6). No remediation details provided in the documents.
CVE-2006-1835
Cross-site scripting XSS vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter...
Calendarix 0.7 - YearCal.php Cross-Site Scripting
Calendarix 0.7 - YearCal.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17562/info Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed ...
Calendarix "yearcal.php" XSS Attacking
Website : http://www.calendarix.com Vulnerable : if !isset$GET'ycyear' $ycyear = $y ; else $ycyear = $GET'ycyear'; http://www.site.com/path/yearcal.php?ycyear=scriptalertdocument.cookie/script...
Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17562/info Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the...
Sql injection
Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...
CVE-2006-0492
Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...
CVE-2006-0492
The CVE-2006-0492 entry affects Calendarix and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) catview in cal_functions.inc.php and (2) login in cal_login.php. The catview vector may overlap CVE-2005-1865. No product versions ...
CVE-2006-0492
Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...
[eVuln] Calendarix SQL Injection & Authorization Bypass Vulnerabilities
New eVuln Advisory: Calendarix SQL Injection & Authorization Bypass Vulnerabilities http://evuln.com/vulns/52/summary.html --------------------Summary---------------- Software: Calendarix Sowtware's Web Site: http://www.calendarix.com/ Versions: 0.6.20050830 Critical Level: Moderate Type: SQL...
Calendarix Advanced <= 1.5 Multiple Vulnerabilities - Active Check
Calendarix is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
calendarix.txt
/ Advisorie : 01-0005-15 title: multiple vulnerability Software: Calendarix Advanced Date: 28. April 2005 Web: http://www.calendarix.com/ / - Affected software description: Webcalendar is a web software write in php y mysql - Expoit: Include line 16 admin/caladmintop.php:includeonce...
CVE-2005-1865
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...
CVE-2005-1864
PHP remote file inclusion vulnerability in caladmintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter...
CVE-2005-1866
CVE-2005-1866 affects Calendarix Advanced
CVE-2005-1864
PHP remote file inclusion vulnerability in caladmintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter...
CVE-2005-1865
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...