CVE-2015-8235

Directory traversal vulnerability in Spiffy before 5.4...

CVE-2015-8235

Directory traversal vulnerability in Spiffy before 5.4...

CVE-2015-8235

Directory traversal vulnerability in Spiffy before 5.4...

DEBIAN-CVE-2015-8235

Directory traversal vulnerability in Spiffy before 5.4...

CVE-2015-8235

The CVE-2015-8235 entry concerns a directory traversal vulnerability in the Spiffy project, affecting versions before 5.4 . The connected documents consistently describe the issue as a vulnerability in Spiffy prior to 5.4, without providing details on affected platforms, exploit vectors, or the r...

CVE-2015-8235

Directory traversal vulnerability in Spiffy before 5.4...

CVE-2015-8235

Directory traversal vulnerability in Spiffy before 5.4...

PT-2017-7362

Name of the Vulnerable Software and Affected Versions Spiffy versions prior to 5.4 Description A directory traversal issue exists. Recommendations For versions prior to 5.4, update to version 5.4 or later to resolve the issue...

CVE-2015-8235: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Spiffy before 5.4...

WordPress Spiffy Calendar Plugin Cross-Site Scripting Vulnerability

WordPress is a suite of blogging platforms developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers running PHP and MySQL.Spiffy Calendar plugin is a plugin for managing and displaying user event and appointment information. A...

CVE-2017-9420

Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...

Cross site scripting

Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...

CVE-2017-9420

Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...

CVE-2017-9420

Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...

CVE-2017-9420

The CVE-2017-9420 entry concerns a Cross-Site Scripting (XSS) flaw in the WordPress Spiffy Calendar plugin before version 3.3.0, exploitable via the yr parameter to inject arbitrary JavaScript. Impact is reflected in multiple sources; remediation is to upgrade to version 3.3.0 or later. Connected...

CVE-2017-9420: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...

PT-2017-18909

Name of the Vulnerable Software and Affected Versions Spiffy Calendar plugin versions prior to 3.3.0 Description The issue allows remote attackers to inject arbitrary JavaScript code via the yr parameter, potentially leading to cross-site scripting XSS attacks. Recommendations For versions prior ...

Spiffy Calendar <= 3.2.0 - Reflected Cross-Site Scripting (XSS)

The Spiffy Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

CVE-2016-6286

The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...

Code injection

The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...