Calendars for the Web 4.02 - Admin Authentication Bypass

Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in the administration page. The page saves the past session...

PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload

PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...

Heap overflow

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

CVE-2008-2444

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter...

Sql injection

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter...

CVE-2008-2444

CVE-2008-2444 concerns SQL injection in CaLogic Calendars 1.2.2. The vulnerability resides in userreg.php via the langsel parameter, allowing remote attackers to execute arbitrary SQL commands. Metrics indicate a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no authent...

CaLogic Calendars 1.2.2 (langsel) Remote SQL Injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

calogic-sql.txt

/---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

CaLogic Calendars 1.2.2 - langsel SQL Injection

CaLogic Calendars 1.2.2 - langsel SQL Injection /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars...

CaLogic Calendars 1.2.2 (langsel) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== CaLogic Calendars 1.2.2 langsel Remote SQL Injection Vulnerability ====================================================================...

CaLogic Calendars 1.2.2 - 'langsel' SQL Injection

/---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== MegaBBS Forum 2.2 SQL/XSS Multiple Remote Vulnerabilities =========================================================== AmnPardaz Security Research Team Title: MegaBBS Forum Multipl...

Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting

www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Description: A complete, fully featured ASP...

Debian DSA-1325-1 : evolution - several vulnerabilities

Several remote vulnerabilities have been discovered in Evolution, a groupware suite with mail client and organizer. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1002 Ulf Harnhammar discovered that a format string vulnerability in the handling of...

Design/Logic Flaw

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...

CVE-2007-2637

Removed by vendor...

CVE-2006-6286

Palm Desktop 4.1.4 and earlier stores user data with weak permissions under the application directory, which allows local users to obtain sensitive information address books, calendar files, and todo lists of other users via unspecified vectors. NOTE: The provenance of this information is unknown...

CVE-2006-2570

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS"CLPath" parameter to 1 reconfig.php and 2 srxclr.php. NOTE: this might be due to a globals overwrite issue...

Remote file inclusion

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS"CLPath" parameter to 1 reconfig.php and 2 srxclr.php. NOTE: this might be due to a globals overwrite issue...