624 matches found
PHP Event Calendar 4.2 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18593/info PHP Event Calendar is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit cou...
PHP Event Calendar 1.4 Calendar.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an...
Wordpress Spider Event Calendar Plugin 1.3.0 - Multiple Vulnerabilities
No description provided by source. waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind waraxe Date: 22. May 2013 Location: Estonia, Tartu Web:...
PHP Event Calendar <= 1.5 - Multiple Vulnerabilities
No description provided by source. Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting...
Joomla eventcal Component 1.6.4 com_eventcal Blind SQL Injection Vulnerability
No description provided by source. Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs Home: http://a-h-crew.net Download App:http://joomlacode.org/gf/project/eventcal/frs/ ==========ExPl0iT3d by RoAdKiLlEr========== +Description: eventCal is a calendar component...
A4Desk Event Calendar 'v' Parameter Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31507/info A4Desk Event Calendar is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...
Jigowatt PHP Event Calendar "year" SQL注入漏洞
Jigowatt PHP Event Calendar是一款日历WEB应用程序。 Jigowatt PHP Event Calendar calendar/dayview.php不正确过滤"year"参数数据，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 Jigowatt PHP Event Calendar 2.x 目前没有详细解决方案： http://codecanyon.net/item/php-event-calendar/47723...
PHP Event Calendar SQL Injection
Exploit Title: PHP Event Calendar / SQL Injection Vulnerability Date: 14/04/2014 Author: Daniel Godoy Author Mail: danielgodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: PHP Event Calendar Software Link: http://codecanyon.net/item/php-event-calendar/47723 Tested on...
Jigowatt PHP Event Calendar - day_view.php SQL Injection
Jigowatt PHP Event Calendar - dayview.php SQL Injection source: https://www.securityfocus.com/bid/66923/info Jigowatt PHP Event Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit ma...
Jigowatt PHP Event Calendar - 'day_view.php' SQL Injection
source: https://www.securityfocus.com/bid/66923/info Jigowatt PHP Event Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acces...
LuxCal 3.2.2 Cross Site Request Forgery / SQL Injection
Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...
Drupal Event calendar模块跨站脚本漏洞
CVECAN ID: CVE-2014-1607 Event Calendar模块中可以日历格式来添加、编辑、查看事件。 EventCalendar module for Drupal 7.14在实现上存在跨站脚本漏洞，可使远程攻击者通过eventcalander/的year参数，利用此漏洞注入任意Web脚本或HTML。 0 Drupal eventcalendar 7.14 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://drupal.org/project/eventcalendar...
WordPress Spider Event Calendar Plugin 1.3.0 - Multiple Vulnerabilities
Spider Event Calendar plugin is prone to multiple vulnerabilities: 1. Insufficient access check for AJAX operations in "calendar.php"; 2. SQL Injection in "calendar.php" function "spidercalendarquickupdate"; 3. SQL Injection in "calendar.php" function "spidercalendarquickedit"; 4. SQL Injection i...
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Locatio...
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities
waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...
Spider Event Calendar 1.3.0 Cross Site Scripting / Path Disclosure / SQL Injection
waraxe-2013-SA104 - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin =================================================================================== Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Descriptio...
Eventy CMS 1.8 Plus - Multiple Vulnerabilities
Eventy CMS 1.8 Plus - Multiple Vulnerabilities Title: ====== Eventy CMS v1.8 Plus - Multiple Web Vulnerablities Date: ===== 2012-11-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=756 VL-ID: ===== 756 Common Vulnerability Scoring System:...
Eventy CMS 1.8 Plus - Multiple Vulnerabilities
Title: ====== Eventy CMS v1.8 Plus - Multiple Web Vulnerablities Date: ===== 2012-11-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=756 VL-ID: ===== 756 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: ============= Publish...
WordPress PHP Event Calendar Plugin - SQL Injection
This WordPress PHP Event Calendar plugin's "cid" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin PHP Event Calendar - cid SQL Injection
WordPress Plugin PHP Event Calendar - cid SQL Injection source: https://www.securityfocus.com/bid/56478/info The PHP Event Calendar plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An...