529 matches found
PHP Event Calendar 1.4/1.5 Index.PHP Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20001/info PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...
Joomla JE Ajax Event Calendar Component (com_jeajaxeventcalendar) SQL Injection
No description provided by source. Vendor: http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html Download: http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110 Author: altbta Contact: l9atHotmailDotcom Home: http://xp10.com Thanks to:...
Eventy CMS 1.8 Plus - Multiple Vulnerabilities
No description provided by source. Title: ====== Eventy CMS v1.8 Plus - Multiple Web Vulnerablities Date: ===== 2012-11-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=756 VL-ID: ===== 756 Common Vulnerability Scoring System: ==================================== 8.3...
Wordpress Spider Event Calendar Plugin 1.3.0 - Multiple Vulnerabilities
No description provided by source. waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind waraxe Date: 22. May 2013 Location: Estonia, Tartu Web:...
A4Desk Event Calendar 'v' Parameter Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31507/info A4Desk Event Calendar is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...
88Scripts Event Calendar 2.0 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15658/info 88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
PHP Event Calendar 1.4 Calendar.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an...
PHP Event Calendar <= 1.5 - Multiple Vulnerabilities
No description provided by source. Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting...
Joomla eventcal Component 1.6.4 com_eventcal Blind SQL Injection Vulnerability
No description provided by source. Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs Home: http://a-h-crew.net Download App:http://joomlacode.org/gf/project/eventcal/frs/ ==========ExPl0iT3d by RoAdKiLlEr========== +Description: eventCal is a calendar component...
PHP Event Calendar 4.2 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18593/info PHP Event Calendar is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit cou...
Jigowatt PHP Event Calendar "year" SQL注入漏洞
Jigowatt PHP Event Calendar是一款日历WEB应用程序。 Jigowatt PHP Event Calendar calendar/dayview.php不正确过滤"year"参数数据，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 Jigowatt PHP Event Calendar 2.x 目前没有详细解决方案： http://codecanyon.net/item/php-event-calendar/47723...
PHP Event Calendar SQL Injection
Exploit Title: PHP Event Calendar / SQL Injection Vulnerability Date: 14/04/2014 Author: Daniel Godoy Author Mail: danielgodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: PHP Event Calendar Software Link: http://codecanyon.net/item/php-event-calendar/47723 Tested on...
Jigowatt PHP Event Calendar - 'day_view.php' SQL Injection
source: https://www.securityfocus.com/bid/66923/info Jigowatt PHP Event Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acces...
Jigowatt PHP Event Calendar - day_view.php SQL Injection
Jigowatt PHP Event Calendar - dayview.php SQL Injection source: https://www.securityfocus.com/bid/66923/info Jigowatt PHP Event Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit ma...
LuxCal 3.2.2 Cross Site Request Forgery / SQL Injection
Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...
Drupal Event calendar模块跨站脚本漏洞
CVECAN ID: CVE-2014-1607 Event Calendar模块中可以日历格式来添加、编辑、查看事件。 EventCalendar module for Drupal 7.14在实现上存在跨站脚本漏洞，可使远程攻击者通过eventcalander/的year参数，利用此漏洞注入任意Web脚本或HTML。 0 Drupal eventcalendar 7.14 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://drupal.org/project/eventcalendar...
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities
waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...
WordPress Spider Event Calendar Plugin 1.3.0 - Multiple Vulnerabilities
Spider Event Calendar plugin is prone to multiple vulnerabilities: 1. Insufficient access check for AJAX operations in "calendar.php"; 2. SQL Injection in "calendar.php" function "spidercalendarquickupdate"; 3. SQL Injection in "calendar.php" function "spidercalendarquickedit"; 4. SQL Injection i...
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Locatio...
Spider Event Calendar 1.3.0 Cross Site Scripting / Path Disclosure / SQL Injection
waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...