CVE-2007-3353

The CVE-2007-3353 vulnerability affects MyEvent 1.6, specifically in includes/template.php, where a remote file inclusion can occur via the myevent_path parameter to execute arbitrary PHP code. The root cause is an improper handling of the URL parameter, enabling code execution on the server. A t...

PT-2007-4630 · Myevent · Myevent

Name of the Vulnerable Software and Affected Versions: MyEvent version 1.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the myevent path parameter in the includes/template.php file. A reliable third party disputes this issue, stating that the entire fi...

CVE-2007-0690

myEvent 1.6 allows remote attackers to obtain sensitive information via 1 a Log In action without a password to login.php, or an invalid 2 view or 3 monthno parameter to myevent.php, which reveals the path in various error messages...

CVE-2007-0690

myEvent 1.6 allows remote attackers to obtain sensitive information via 1 a Log In action without a password to login.php, or an invalid 2 view or 3 monthno parameter to myevent.php, which reveals the path in various error messages...

CVE-2007-0690

CVE-2007-0690 affects myEvent version 1.6. Remote attackers can cause error messages from myevent.php and login.php to reveal server paths, enabling partial information disclosure. The issue arises when processing parameters view[], monthno[], or during a login action without a password, which tr...

myEvent version 1.6 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...

myEvent Myevent.PHP远程文件包含漏洞

myEvent是一款基于PHP的事件管理程序。 myEvent不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'myevent.php'脚本对用户提交的"myeventpath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 myWebland myEvent 1.3 myWebland myEvent 1.2 http://mywebland.com/download.php?id=6...

myEvent14.txt

--------------------------------------------------------------------------------------- myEvent 1.4 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/08/11 HomePage : http://www.sh3ll.ir...

myEvent <= 1.4 Multiple Remote File Include Vulnerabilities

--------------------------------------------------------------------------------------- myEvent 1.4 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/08/11 HomePage : http://www.sh3ll.ir...

CVE-2006-4083

PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-4083

CVE-2006-4083 : A PHP remote file inclusion vulnerability in viewevent.php of the myWebland myEvent 1.x releases allows an attacker to execute arbitrary PHP code by supplying a URL in the myevent_path parameter. This is described as a different vector than CVE-2006-4040. Affected product: myWebla...

CVE-2006-4040

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

CVE-2006-4040

CVE-2006-4040 is a PHP remote file inclusion (RFI) vulnerability in myWebland myEvent prior to or at version 1.3, affecting myevent.php. An attacker can supply a URL via the myevent_path parameter to execute arbitrary PHP code on the server. The vulnerability is characterized by remote code execu...

CVE-2006-4040

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

EUVD-2006-4033

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

myEvent 1.2/1.3 - 'myevent.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19246/info myEvent is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context ...

myEvent 1.21.3 - myevent.php Remote File Inclusion

myEvent 1.21.3 - myevent.php Remote File Inclusion source: https://www.securityfocus.com/bid/19246/info myEvent is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containin...

myEvent Multiple Remote Vulnerabilities

The remote host is running myEvent, a calendar application written in PHP. The installed version of myEvent fails to sanitize user input to the 'myeventpath' parameter in several scripts before using it to include PHP code from other files. An unauthenticated attacker may be able to read arbitrar...

CVE-2006-1908

Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eventdesc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the eventid parameter to 1 addevent.php or 2 del.php or 3 eventdesc parameter to addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...