SuperCali PHP Event Calendar 0.4.0 - SQL Injection

SuperCali PHP Event Calendar 0.4.0 - SQL Injection --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability ==============================================================...

phpevent-rfi.txt

Title : PHP Event Calendar 1.5.1 index.php Remote File Include Vulnerability Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.scriptdungeon.com/jump.php?ScriptID=633 Affected software description : Title:...

CVE-2006-6228

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

CVE-2006-6229

Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file...

CVE-2006-6228

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

CVE-2006-6228

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

CVE-2006-6228

CVE-2006-6228 is an XSS vulnerability in Codewalkers ltwCalendar (also called PHP Event Calendar) prior to 4.2.1. Remote attackers can inject arbitrary HTML or web script via unknown vectors. The NVD record notes a CVSSv2 base score of 6.8 (MEDIUM) with network attack vector, no authentication, a...

CVE-2006-6229

The CVE-2006-6229 entry affects Codewalkers ltwCalendar (aka PHP Event Calendar) prior to 4.2.1. The underlying issue is that failed login attempts are logged, which could allow an attacker to infer correct passwords from the log file. The available records specify the affected software and the v...

PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability

Title : PHP Event Calendar 1.5.1 index.php Remote File Include Vulnerability Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.scriptdungeon.com/jump.php?ScriptID=633 Affected software description : Title:...

CVE-2006-4825

CVE-2006-4825 concerns multiple cross-site scripting (XSS) vulnerabilities in SoftComplex PHP Event Calendar 1.5.1 (and possibly earlier) where remote attackers can inject arbitrary script/HTML via the parameters ti, bi, or cbgi in cl_files/index.php. The connected documents reiterate the same de...

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...

os2a_1007.txt

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...

PHP Event Calendar 1.41.5 - index.php Multiple Cross-Site Scripting Vulnerabilities

PHP Event Calendar 1.41.5 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20001/info PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...

PHP Event Calendar 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20001/info PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...

CVE-2006-3684

PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pathtocalendar parameter, which overwrites the $pathtocalendar variable from an extract function call...

solpot-adv-01.txt

SolpotCrew Community PHP Event Calendar versi 1.4 pathtocalendar Remote File Inclusion Vendor site : http://www.softcomplex.com/products/phpeventcalendar/ Bug Found By :Solpot a.k.a k. Hasibuan 13th july 2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-01.t...

CVE-2006-3684

The CVE-2006-3684 issue affects SoftComplex PHP Event Calendar 1.4, where a PHP remote file inclusion vulnerability exists in calendar.php. An attacker can provide a URL in the path_to_calendar parameter, which is processed by an extract() call and overwrites the $path_to_calendar variable, enabl...

PHP Event Calendar 1.4 - calendar.php Remote File Inclusion

PHP Event Calendar 1.4 - calendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...

PHP Event Calendar 1.4 - 'calendar.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...