199 matches found
web calendar system <= 3.40 (xss/sql) Multiple Vulnerabilities
No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...
Proverbs Web Calendar 1.1 Password Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26584/info Proverbs Web Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
LuxCal Web Calendar SQL注入漏洞
LuxCal是一个免费的轻量级基于Web的事件日历。 由于通过"cal"参数传递到rssfeed.php的输入在被用于SQL查询前未能正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 LuxCal v3.2.2 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.luxsoft.eu/index.php?pge=home...
LuxCal Web Calendar跨站请求伪造漏洞
LuxCal是一个免费的轻量级基于Web的事件日历。 由于应用程序允许用户通过未经验证的HTTP请求执行某些操作，攻击者可以利用漏洞欺骗管理员用户登录特制的网页，从而添加管理用户。 0 LuxCal v3.2.2 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.luxsoft.eu/index.php?pge=home html form method="POST" name="form0" action="http://127.0.0.1/lux/index.php?lc&editUser=y&uid=add" inp...
Mail.Ru выйдет на Запад под брендом my.com
Российская интернет-компания Mail.Ru Group будет использовать имя my.com для глобального развития, сообщается в пресс-релизе. Гендиректор компании Дмитрий Гришин пояснил, что на сегодняшний день сервисами Mail.Ru Group пользуется более 90 процентов российских интернет-пользователей. Компания такж...
LuxCal Web Calendar SQL Injection Vulnerability
LuxCal Web Calendar is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
LuxCal Web Calendar 2.4.22.5.0 - SQL Injection
LuxCal Web Calendar 2.4.22.5.0 - SQL Injection LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 6 July, 2011 Software Information + Vendor ...
LuxCal Web Calendar 2.4.2 / 2.5.0 SQL Injection
LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 6 July, 2011 Software Information + Vendor : http://www.luxsoft.eu + Download :...
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...
WebCalenderC3 cross-site scripting vulnerability
Overview WebCalenderC3 from C3 Corp. contains a cross-site scripting vulnerability. WebCalenderC3 from C3 Corp. is a calender software. WebCalenderC3 contains a cross-site scripting vulnerability. According to the developer, they were not able to reproduce the vulnerability. However, to mitigate...
Web Calendar - Remote Database Disclosure
--------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p + Script : WEB Calendar vuln. in :...
Web Calendar - Remote Database Disclosure
Web Calendar - Remote Database Disclosure --------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search fo...
WEB Calendar Remote Database Disclosure Vulnerability
No description provided by source. --------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p...
WEB Calendar Database Disclosure
--------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p + Script : WEB Calendar vuln. in :...
WEB Calendar Remote Database Disclosure Vulnerability
Exploit for unknown platform in category web applications ===================================================== WEB Calendar Remote Database Disclosure Vulnerability ===================================================== + Dork : search for it :p + Script : WEB Calendar vuln. in :...
Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp Username : ' o...
Web-Calendar Lite 1.0 - Authentication Bypass
Web-Calendar Lite 1.0 - Authentication Bypass ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp...
Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== Web-Calendar Lite 1.0 Auth Bypass SQL Injection Vulnerability =============================================================== Script :Web-Calendar Lite 1.0 Site...
Web-Calendar Lite 1.0 - Authentication Bypass
----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp Username : ' or '1=1 Password : ' or '1=1 Ä°ÅŸini...