441 matches found
CVE-2005-3961
WebCalendar 1.0.1 is affected by CVE-2005-3961 due to missing input sanitising in the export_handler.php flow, enabling remote attackers to overwrite local WebCalendar data files by supplying a modified id parameter. Multiple OpenVAS/NASL and CVE references confirm this vulnerability and characte...
CVE-2005-3949
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...
CVE-2005-3961
exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...
CVE-2005-3949
CVE-2005-3949 affects webcalendar (PHP-based calendar). Connected sources confirm multiple SQL injection vulnerabilities in WebCalendar 1.0.1 that allow remote attackers to execute arbitrary SQL via the following vectors: (1) startid in activity_log.php, (2) startid in admin_handler.php, (3) temp...
CVE-2005-3961
exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...
CVE-2005-3949
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...
CVE-2005-3961
exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...
CVE-2005-3949
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...
WebCalendar 1.0.1 - Multiple SQL Injections
WebCalendar 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic o...
WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting
WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...
WebCalendar 1.0.1 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation cou...
WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting
source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web...
WebCalendar < 1.0.2 Multiple Vulnerabilities
Binary data 3303.prm...
[Full-disclosure] WebCalendar Multiple Vulnerabilities
WebCalendar Multiple Vulnerabilities Name Multiple Vulnerabilities in WebCalendar Systems Affected WebCalendar verified on 1.0.1 Severity Medium Risk Vendor www.k5n.us/webcalendar.php?topic=About Advisory http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities/ Advisory...
WebCalendar SQL Injection
The remote installation of WebCalendar may allow an attacker to cause an SQL Injection vulnerability in the program allowing an attacker to cause the program to execute arbitrary SQL statements. OpenVAS Vulnerability Test $Id: webcalendarsqlinjection.nasl 8023 2017-12-07 08:36:26Z teissa $...
WebCalendar SQL Injection (Nov 2005) - Active Check
The remote installation of WebCalendar may allow an attacker to cause an SQL Injection vulnerability in the program allowing an attacker to cause the program to execute arbitrary SQL statements. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced...
Debian DSA-799-1 : webcalendar - remote code execution
A trivially-exploitable bug was discovered in webcalendar that allows an attacker to execute arbitrary code with the privileges of the HTTP daemon on a system running a vulnerable version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
[SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...
