199 matches found
Proverbs Web Calendar 1.1 - 'Password' SQL Injection
source: https://www.securityfocus.com/bid/26584/info Proverbs Web Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...
ACal Web Calendar 2.2.6 Remote File Include Vulnerabilities
ACal Web Calendar 2.2.6 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/project/showfiles.php?groupid=105617 exploit:...
CalendarixCalPath远程文件包含漏洞
Calendarix是运行在PHP和MySQL上的基于Web的日历。Calendarix在处理文件包含时存在问题，远程攻击者可能利用此漏洞在主机上执行任意命令。Calendarix中存在远程文件包含漏洞，起因是应用程序没能正确的过滤用户提供的输入。攻击者可以利用这个漏洞在受影响的机器上以Web Server进程的权限执行任意服务器端脚本。 Advanced 1.5.20050501 如果您不能立刻安装补丁或者升级， 建议您采取以下措施以降低威胁： 禁用allowurlfopen和registerglobals命令。 厂商补丁： Calendarix ----------...
CVE-2006-1508
Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...
CVE-2006-1508
Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...
CVE-2006-1508
CVE-2006-1508 affects MH Software Connect Daily Web Calendar Software (version 3.2.9 and earlier). The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML via various query parameters across multiple pages: calendar_id, style_s...
Web Calendar Pro - 'Dropbase.php' SQL Injection
source: https://www.securityfocus.com/bid/16789/info Web Calendar Pro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromi...
Web Calendar Pro - Dropbase.php SQL Injection
Web Calendar Pro - Dropbase.php SQL Injection source: https://www.securityfocus.com/bid/16789/info Web Calendar Pro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Sql injection
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...
CVE-2006-0835
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...
CVE-2006-0835
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...
CVE-2006-0835
CVE-2006-0835 describes an SQL injection in MitriDAT Web Calendar Pro, specifically in dropbase.php, exploitable via the tabls parameter. The flaw allows remote attackers to modify internal SQL queries and trigger a denial of service (inaccessible database). Affected product: MitriDAT Web Calenda...
XOR-wcp.txt
------=Part353323175882.1140054719148 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...
[Full-disclosure] Web Calendar Pro - Denial of Service SQL Injection Vulnerability
======================================================================================= XOR Crew :: Security Advisory 1/12/2006 ======================================================================================= Web Calendar Pro - Denial of Service SQL injection lame...
Calendar Express Multiple Vulnerabilities (SQLi, XSS)
The remote host is using Calendar Express, a PHP web calendar. Vulnerabilities exist in this version that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser, and SQL injection. An attacker could exploit these flaws to use the remote host to...
PhpWebSite calendar module contains a SQL injection vulnerability
Overview The PhpWebSite contains an SQL injection vulnerability that may allow malicious users to execute SQL queries on a server with the privileges of the PhpWebSite administrator. Description PhpWebSite is an open-source web content management system that includes a web-based calendar module t...
CVE-2001-1287
CVE-2001-1287 describes a buffer overflow in the Web Calendar component of Ipswitch IMail versions up to 7.04 and earlier. The vulnerability allows remote attackers to execute arbitrary code by sending a long HTTP GET request to the affected Web Calendar interface. The provided connected records ...