supercali-sql.txt

--==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Sql injection

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...

CVE-2007-3582

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...

CVE-2007-3582

CVE-2007-3582 refers to a SQL injection vulnerability in SuperCali PHP Event Calendar 0.4.0, exploitable through the o parameter in index.php, enabling remote attackers to execute arbitrary SQL commands. The core vulnerability is an input handling/validation issue in that parameter, allowing craf...

CVE-2007-3582: Undefined Security Weakness

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...

SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz...

SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== SuperCali PHP Event Calendar 0.4.0 SQL Injection Vulnerability ==============================================================...

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

SuperCali PHP Event Calendar 0.4.0 - SQL Injection --==+================================================================================+==-- --==+ SuperCali Event Calendar SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

phpevent-rfi.txt

Title : PHP Event Calendar 1.5.1 index.php Remote File Include Vulnerability Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.scriptdungeon.com/jump.php?ScriptID=633 Affected software description : Title:...

CVE-2006-6228

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

CVE-2006-6228

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

CVE-2006-6229

Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file...

CVE-2006-6228

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

CVE-2006-6228

CVE-2006-6228 is an XSS vulnerability in Codewalkers ltwCalendar (also called PHP Event Calendar) prior to 4.2.1. Remote attackers can inject arbitrary HTML or web script via unknown vectors. The NVD record notes a CVSSv2 base score of 6.8 (MEDIUM) with network attack vector, no authentication, a...

CVE-2006-6229

The CVE-2006-6229 entry affects Codewalkers ltwCalendar (aka PHP Event Calendar) prior to 4.2.1. The underlying issue is that failed login attempts are logged, which could allow an attacker to infer correct passwords from the log file. The available records specify the affected software and the v...

CVE-2006-6229: Undefined Security Weakness

Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file...

CVE-2006-6228: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors...

PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability

Title : PHP Event Calendar 1.5.1 index.php Remote File Include Vulnerability Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.scriptdungeon.com/jump.php?ScriptID=633 Affected software description : Title:...

CVE-2006-4825

CVE-2006-4825 concerns multiple cross-site scripting (XSS) vulnerabilities in SoftComplex PHP Event Calendar 1.5.1 (and possibly earlier) where remote attackers can inject arbitrary script/HTML via the parameters ti, bi, or cbgi in cl_files/index.php. The connected documents reiterate the same de...

CVE-2006-4825: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in clfiles/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 ti, 2 bi, or 3 cbgi parameters...