Sql injection

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter aka user field to admin/index.php, 2 the userpass parameter aka pass field to admin/index.php, or 3 the id parameter to...

CVE-2008-6608

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter aka user field to admin/index.php, 2 the userpass parameter aka pass field to admin/index.php, or 3 the id parameter to...

CVE-2008-6608

DevelopItEasy Events Calendar 1.2 is affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to execute arbitrary SQL commands through (1) user_name (user field) or (2) user_pass (pass field) in admin/index.php, or (3) id in calendar_details.php. Root cause: improper ...

CVE-2008-6608

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter aka user field to admin/index.php, 2 the userpass parameter aka pass field to admin/index.php, or 3 the id parameter to...

CVE-2008-6608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter aka user field to admin/index.php, 2 the userpass parameter aka pass field to admin/index.php, or 3 the id parameter to...

Improper access control

evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to 1 evcal.mdb and 2 evcal97.mdb...

CVE-2008-6357

CVE-2008-6357 affects MyCal Personal Events Calendar. The vulnerability arises from storing the database (mycal.mdb) under the web root with insufficient access control, enabling remote attackers to download the database containing usernames and passwords via a direct request. The NVD entry lists...

CVE-2008-6356

CVE-2008-6356 affects the EvCal Events Calendar. The underlying issue is improper access control that stores sensitive data under the web root, allowing remote attackers to download the database files evcal.mdb and evcal97.mdb. This exposure can disclose usernames and passwords. The provided conn...

CVE-2008-6357

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb...

CVE-2008-6357: Undefined Security Weakness

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb...

CVE-2008-6356: Undefined Security Weakness

evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to 1 evcal.mdb and 2 evcal97.mdb...

MyCal Personal Events Calendar Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== MyCal Personal Events Calendar mycal.mdb Database Disclosure Vuln =================================================================== MyCal Personal Events Calendar...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar - Database Disclosure MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

No description provided by source. MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit:...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

evCal Events Calendar - Database Disclosure

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...

developec-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | //...

DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities ========================================================================...