Joomla! Component JE Event Calendar - SQL Injection

Joomla! Component JE Event Calendar - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit

No description provided by source. --------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali P...

SuperCali PHP Event Calendar Password Changer

--------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali PHP Event Calendar...

SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications ==================================================================== SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit ====================================================================...

SuperCali PHP Event Calendar - Arbitrary Change Admin Password

SuperCali PHP Event Calendar - Arbitrary Change Admin Password --------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz...

SuperCali PHP Event Calendar - Arbitrary Change Admin Password

--------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali PHP Event Calendar...

TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability

No description provided by source. //// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// --+-- Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar"...

TotalCalendar 2.4 Remote File Inclusion

//// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar" Date: "20/04/2009" Time: "18:38" + Bugs :...

TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion

//// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar" Date: "20/04/2009" Time: "18:38" + Bugs :...

TotalCalendar 2.4 - inc_dir Remote File Inclusion

TotalCalendar 2.4 - incdir Remote File Inclusion //// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event...

TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== TotalCalendar 2.4 incdir Remote File Inclusion Vulnerability =============================================================== Home Page : "http://www.simpoe.com/" Download :...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

CVE-2008-6104

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

CVE-2008-6103

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

Sql injection

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

CVE-2008-6104

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

CVE-2008-6103

CVE-2008-6103 is a PHP remote file inclusion in A4Desk Event Calendar’s index.php. When magic_quotes_gpc is disabled, an attacker can supply a URL via the v parameter to execute arbitrary PHP on the server. Affected: A4Desk Event Calendar (PHP). Root cause: unsafely including a user-controlled UR...

CVE-2008-6104

Summary of CVE-2008-6104 (A4Desk Event Calendar SQLi) Affects: A4Desk PHP Event Calendar.Vulnerability: SQL injection via the eventid parameter to admin/index.php, caused by insufficient input sanitization.Impact: Remote attackers could execute arbitrary SQL commands (partial confidentiality/ int...

a4desk-sqldisclose.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

A4Desk Event Calendar - 'eventid' SQL Injection

source: https://www.securityfocus.com/bid/33835/info A4Desk Event Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...