WordPress CP Multi View Event Calendar 1.1.4 SQL Injection

SQL Injection vulnerability in CP Multi View Event Calendar plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress PHP Event Calendar 1.5 Arbitrary File Upload

Exploit Title: Wordpress PHP Event Calendar Plugin - Arbitrary File Upload Google Dork: inurl:/plugins/php-event-calendar/ Date: 02.04.2015 Exploit Author: CrashBandicot @DosPerl Source Plugin: https://wordpress.org/plugins/php-event-calendar/ Vendor HomePage: http://phpeventcalendar.com/ Version...

PHP Event Calendar <= 1.5 - Arbitrary File Upload

The php-event-calendar WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress PHP Event Calendar Plugin <= 1.5 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability via "uploadify.php" file. Solution Update the plugin...

CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...

WordPress Webdorado Spider Event Calendar SQL Injection

WordPress Spider Event Calendar is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin Spider Event Calendar SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server to set up a personal blog site . Spider Event Calendar is one of the highly configurable calendar plugin . A SQL injection vulnerability exist...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

Sql injection

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

The CVE-2015-2196 issue affects WordPress Spider Event Calendar plugin (versions up to 1.4.9). The vulnerability arises in the spiderbigcalendar_month action when processing the cat_id parameter in wp-admin/admin-ajax.php, allowing an attacker to perform SQL injection. Impact described across sou...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

WordPress CP Multi View Event Calendar Plugin <= 1.1.4 - SQL Injection

CP Multi View Event Calendar plugin is prone to an SQL injection vulnerability in "id" and "viewid" parameters. Also, there is a cross-site scripting vulnerability in "weekstartday" parameter. Solution Update the plugin...

PT-2015-5657

Name of the Vulnerable Software and Affected Versions Spider Event Calendar version 1.4.9 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat id parameter in a spiderbigcalendar month action to the...

WordPress Webdorado Spider Event Calendar 1.4.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications . Exploit Title: WordPress: Webdorado Spider Event Calendar = 1.4.9 SQL Injection Date: 2015-02-12 Exploit Author: Mateusz Lach Vendor Homepage: https://www.facebook.com/WebDorado or http://www.webdorado.com Software Link:...

WordPress Plugin Webdorado Spider Event Calendar 1.4.9 - SQL Injection

WordPress Plugin Webdorado Spider Event Calendar 1.4.9 - SQL Injection . Exploit Title: WordPress: Webdorado Spider Event Calendar = 1.4.9 SQL Injection Date: 2015-02-12 Exploit Author: Mateusz Lach Vendor Homepage: https://www.facebook.com/WebDorado or http://www.webdorado.com Software Link:...

WordPress Web Dorado Spider Event Calendar Plugin 1.4.9 - SQL Injection

This Web Dorado Spider Event Calendar plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Webdorado Spider Event Calendar 1.4.9 - SQL Injection

. Exploit Title: WordPress: Webdorado Spider Event Calendar = 1.4.9 SQL Injection Date: 2015-02-12 Exploit Author: Mateusz Lach Vendor Homepage: https://www.facebook.com/WebDorado or http://www.webdorado.com Software Link: https://downloads.wordpress.org/plugin/spider-event-calendar.1.4.9.zip...

MyBB Forums 1.8.2 - Persistent Cross-Site Scripting

MyBB Forums 1.8.2 - Persistent Cross-Site Scripting Exploit Title:Stored XSS vulnerability in MyBB 1.8.2 Date: 16th November'2014 Exploit Author: Avinash Kumar Thapa Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/download/ Version: MyBB 1.8.2 latest Tested on: Operating...

Wordpress CP Multi View Event Calendar 1.01 - SQL Injection

No description provided by source. Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 /...