61 matches found
ExtCalendar Mambo Module <= v2( extcalendar.php ) Remote File Include Vulnerabilities
-------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By saudihackrz ----------------------------------------------------------------------------- google : "powered by ExtCalendar v2"...
Mambo Component ExtCalendar 2.0 - Remote File Inclusion
Mambo Component ExtCalendar 2.0 - Remote File Inclusion -------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS...
Mambo Component ExtCalendar 2.0 - Remote File Inclusion
-------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- dork : "powered by ExtCalendar v2" Exploi...
com_extcalendar Mambo Component <= 2.0 Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- dork :...
com_extcalendar Mambo Component <= 2.0 Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ comextcalendar Mambo Component = 2.0 Include Vulnerability ============================================================...
CVE-2006-3556
PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-3556
PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-3556
The CVE-2006-3556 entry refers to a PHP Remote File Inclusion in ExtCalendar 2.0 by Mohamed Moujami. Connected sources confirm the vulnerability is triggered via the mosConfig_absolute_path parameter in extcalendar.php, allowing a remote attacker to cause arbitrary PHP code execution. Impact is p...
Echo Security Advisory 2006.36
ECHO.OR.ID ECHOADV36$2006 --------------------------------------------------------------------------- ECHOADV36$2006 ExtCalendar...
extcalendar.txt
-------------------------------------------------------------------------------- Title : ExtCalendar = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application :...
[ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities
ECHO.OR.ID ECHOADV36$2006 --------------------------------------------------------------------------- ECHOADV36$2006 ExtCalendar == v2.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Ahmad Maulana a.k.a Matdhule Date : Jul...
Extcalendar 2.0 - Extcalendar.php Remote File Inclusion
Extcalendar 2.0 - Extcalendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/18876/info ExtCalendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue ...
Extcalendar 2.0 - 'Extcalendar.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/18876/info ExtCalendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious P...
CVE-2006-1336
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 year, 2 month, 3 next, and 4 prev parameters...
Cross site scripting
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 year, 2 month, 3 next, and 4 prev parameters...
CVE-2006-1336
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 year, 2 month, 3 next, and 4 prev parameters...
CVE-2006-1336
CVE-2006-1336 maps to a cross-site scripting vulnerability in ExtCalendar 1.0 (and possibly earlier than 2.0) where calendar.php accepts unvalidated input via the year, month, next, and prev parameters. This can allow remote attackers to inject arbitrary web script or HTML. The connected records ...
[SA19321] ExtCalendar calendar.php Cross-Site Scripting Vulnerabilities
TITLE: ExtCalendar calendar.php Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA19321 VERIFY ADVISORY: http://secunia.com/advisories/19321/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ExtCalendar 1.x http://secunia.com/product/8810/ DESCRIPTION:...
ExtCalendar v1.0 Multiple Xss Vuln
------------------------------------------ ExtCalendar v1.0 Multiple Xss Vuln ------------------------------------------ Bug: http://victim/path/calendar.php?op=cal&month=3&year="scriptalert/Soot//script http://victim/path/calendar.php?op=cal&month="scriptalert/Soot//script&year=2006...
Extcalendar 1.0 - Cross-Site Scripting
Extcalendar 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/17146/info ExtCalendar is prone to four cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to ha...