Calendarix 0.8.20071118 - SQL Injection

Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...

CVE-2008-2429: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...

Sql injection

SQL injection vulnerability in index.php in the Atapin Jokes comjokes 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action...

CVE-2008-0519

The CVE-2008-0519 entry describes a SQL injection vulnerability in index.php of the Atapin Jokes (com_jokes) 1.0 component used with Mambo and Joomla!. The issue is triggered via the cat parameter in a CatView action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm ...

CVE-2008-0519

SQL injection vulnerability in index.php in the Atapin Jokes comjokes 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action...

CVE-2008-0519: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Atapin Jokes comjokes 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action...

Mambo Component jokes 1.0 - 'cat' SQL Injection

joomla SQL Injectioncomjokes AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comjokes" EXPLOIT : index.php?option=comjokes&Itemid=S@BUN&func=CatView&cat=-776655//union//select//0,1,2,3,username,5,password,7,8//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY...

Sql injection

Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...

CVE-2005-1865

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...

CVE-2005-1865: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...

CVE-2004-2007

Cross-site scripting XSS vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the 1 cat parameter in a CatView function or 2 jokeid parameter in a JokeView function...

CVE-2004-2009: Undefined Security Weakness

NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via 1 a direct call to mainfunctions.php, 2 an invalid jokeid parameter in a JokeView function or 3 an invalid cat parameter in a CatView function, which reveals the path in a PHP error message...

CVE-2004-2007

Cross-site scripting XSS vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the 1 cat parameter in a CatView function or 2 jokeid parameter in a JokeView function...