64 matches found
ExtCalendar 'cat_id' parameter SQL Injection
The version of the ExtCalendar installed on the remote host is affected by a SQL injection vulnerability. The application fails to properly sanitize user-supplied input to the 'catid' parameter of the 'calendar.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...
ExtCalendar 2 (calendar.php) SQL Injection Vulnerability
Exploit for php platform in category web applications Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat...
ExtCalendar 2 SQL Injection
Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat ================================================================ -== ExPloiT ==-...
Extcalendar 2 - calendar.php SQL Injection
Extcalendar 2 - calendar.php SQL Injection Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat...
Extcalendar 2 - 'calendar.php' SQL Injection
Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat ================================================================ -== ExPloiT ==-...
Joomla Extcalendar Blind SQL Injection
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author : Lagripe-Dz 1 contact : [email protected] 8 Home :...
ExtCalendar 2 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== ExtCalendar 2 Blind SQL Injection Vulnerability =============================================== ========================================================== Date: 30/07/2010 Author : Lagripe-Dz...
Joomla Component com_extcalendar XSS Vulnerability
Exploit for php platform in category web applications ================================================== Joomla Component comextcalendar XSS Vulnerability ================================================== x Joomla Component Extcalendar x Author: s4r4d0 x Contact: email protected x Team; Fatal...
Joomla Extcalendar Cross Site Scripting
x Joomla Component Extcalendar x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Extcalendar x Example: http://www.site.com/index.php?option=comextcalendar=XSS x Demo:http://www.ctsalsa.com/cms/index.php?option=comextcalendar="XSS By Fatal...
ExtCalendar 2.0 Beta 2 cross site scripting
Exploit for unknown platform in category web applications =========================================== ExtCalendar 2.0 Beta 2 cross site scripting =========================================== Summary: ExtCalendar is a powerful multi-user web-based calendar application. Features include...
ExtCalendar 2.0 Beta 2 (upgrade.php) Remote XSS Vulnerability
Summary ExtCalendar is a powerful multi-user web-based calendar application. Features include Multi-Languages, Themes, Recurrent Events, Categories, Users and Groups management, Environment and General Settings, Template Configuration, Product Updates. Description ExtCalendar is prone to a...
CVE-2007-0681
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...
Design/Logic Flaw
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...
CVE-2007-0681
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...
CVE-2007-0681
CVE-2007-0681 affects ExtCalendar 2 and earlier. The vulnerability: profile.php lets remote attackers change arbitrary users’ passwords without the original password by submitting modified values to register.php, potentially enabling other unauthorized actions. Impact is noted as high/critical (C...
PT-2007-2135 · Extcalendar · Extcalendar
Name of the Vulnerable Software and Affected Versions: ExtCalendar versions 2 and earlier Description: The issue allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to...
CVE-2007-0681: Insufficiently Protected Credentials
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...
Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit
No description provided by source. form name="userform" action="http://target/register.php" method="post" input name="step" type="hidden" value="regform" tr td class='tableh2' colspan='2'Account Information/td /tr tr td class='tableb' width='160'Username/td td class='tableb' /td /tr tr td...
Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ============================================================== Extcalendar Account Information Username Password Confirm Password E-mail Address Other Details First Name Last Name input type='text' name='...