Improper access control

evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to 1 evcal.mdb and 2 evcal97.mdb...

CVE-2008-6357

CVE-2008-6357 affects MyCal Personal Events Calendar. The vulnerability arises from storing the database (mycal.mdb) under the web root with insufficient access control, enabling remote attackers to download the database containing usernames and passwords via a direct request. The NVD entry lists...

CVE-2008-6357

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb...

CVE-2008-6356

CVE-2008-6356 affects the EvCal Events Calendar. The underlying issue is improper access control that stores sensitive data under the web root, allowing remote attackers to download the database files evcal.mdb and evcal97.mdb. This exposure can disclose usernames and passwords. The provided conn...

MyCal Personal Events Calendar Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== MyCal Personal Events Calendar mycal.mdb Database Disclosure Vuln =================================================================== MyCal Personal Events Calendar...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar - Database Disclosure MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

No description provided by source. MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit:...

evCal Events Calendar - Database Disclosure

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

developec-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | //...

DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities ========================================================================...

CVE-2008-4673

PHP remote file inclusion vulnerability in panel/common/theme/default/headersetup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the 1 pathdocroot and 2 component parameters...

Remote file inclusion

PHP remote file inclusion vulnerability in panel/common/theme/default/headersetup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the 1 pathdocroot and 2 component parameters...

CVE-2008-4673

CVE-2008-4673 is a PHP remote file inclusion in WebBiscuits Software Events Calendar 1.1. The vulnerability resides in panel/common/theme/default/header_setup.php, allowing an attacker to execute arbitrary PHP code by supplying a URL through the (1) path[docroot] and (2) component parameters. Pub...

webbiscuitsec-rfi.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

events Calendar 1.1 - Remote File Inclusion

Events Calendar 1.1 Remote File Inclusion Vulnerability ======================================================== Author: kevin mitnick tunisianblackhat team = = Home : http://tunisianblackhat.com = = email: kevinmitnickAlive.fr = = ========================================================= script ...