Joomla! Component JE Event Calendar - SQL Injection

Joomla! Component JE Event Calendar - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla Component JE Event Calendar SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Joomla Component JE Event Calendar SQL Injection Vulnerability ============================================================== ...BEGIN ADVISORY...

SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit

No description provided by source. --------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali P...

SuperCali PHP Event Calendar Password Changer

--------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali PHP Event Calendar...

SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications ==================================================================== SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit ====================================================================...

SuperCali PHP Event Calendar - Arbitrary Change Admin Password

SuperCali PHP Event Calendar - Arbitrary Change Admin Password --------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz...

SuperCali PHP Event Calendar - Arbitrary Change Admin Password

--------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali PHP Event Calendar...

TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability

No description provided by source. //// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// --+-- Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar"...

TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion

//// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar" Date: "20/04/2009" Time: "18:38" + Bugs :...

TotalCalendar 2.4 Remote File Inclusion

//// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event Calendar" Date: "20/04/2009" Time: "18:38" + Bugs :...

TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== TotalCalendar 2.4 incdir Remote File Inclusion Vulnerability =============================================================== Home Page : "http://www.simpoe.com/" Download :...

TotalCalendar 2.4 - inc_dir Remote File Inclusion

TotalCalendar 2.4 - incdir Remote File Inclusion //// //1 9 2 3 T U R K - G R U P// //// //-----------------------------------------------------------------------// Home Page : "http://www.simpoe.com/" Download : "http://www.simpoe.com/calendre/TotalCalendar2.4.zip" ScriptName: "Simpoe Event...

Sql injection

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

CVE-2008-6103

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

CVE-2008-6104

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

CVE-2008-6104

Summary of CVE-2008-6104 (A4Desk Event Calendar SQLi) Affects: A4Desk PHP Event Calendar.Vulnerability: SQL injection via the eventid parameter to admin/index.php, caused by insufficient input sanitization.Impact: Remote attackers could execute arbitrary SQL commands (partial confidentiality/ int...

CVE-2008-6104

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

CVE-2008-6103

CVE-2008-6103 is a PHP remote file inclusion in A4Desk Event Calendar’s index.php. When magic_quotes_gpc is disabled, an attacker can supply a URL via the v parameter to execute arbitrary PHP on the server. Affected: A4Desk Event Calendar (PHP). Root cause: unsafely including a user-controlled UR...

CVE-2008-6103: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...