441 matches found
CVE-2005-2717
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...
CVE-2005-2717
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...
CVE-2005-2717
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...
CVE-2005-2717
The CVE-2005-2717 issue affects WebCalendar (pre-1.0.1) with a remote file inclusion vulnerability that lets an attacker execute arbitrary PHP code via settings.php or related scripts (e.g., send_reminders.php). Public sources describe a trivially-exploitable bug granting code execution with the ...
WebCalendar -- remote file inclusion vulnerability
WebCalendar is proven vulnerable to a remote file inclusion vulnerability. The sendreminders.php does not properly verify the "includedir" parameter, giving remote attackers the possibility to include local and remote files. These files can be used by the attacker to gain access to the system...
WebCalendar < 1.0.1 send_reminders.php includedir Parameter Remote File Inclusion
Binary data 3182.prm...
WebCalendar send_reminders.php includedir Parameter Remote File Inclusion
The remote version of WebCalendar fails to sanitize user-supplied input to the 'includedir' parameter of the 'sendreminders.php' script. By leveraging this flaw, an attacker may be able to view arbitrary files on the remote host and execute arbitrary PHP code, possibly taken from third-party host...
Debian DSA-766-1 : webcalendar - authorisation failure
A vulnerability has been discovered in webcalendar, a PHP based multi-user calendar, that can lead to the disclosure of sensitive information to unauthorised parties. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 766-1 [email protected] http://www.debian.org/security/ Martin Schulze July 26th, 2005 http://www.debian.org/security/faq -...
DSA-766-1 webcalendar - authorisation failure
Bulletin has no description...
CVE-2005-2320
WebCalendar (PHP-based calendar) before 1.0.0 contains an access-control flaw in assistant_edit.php that can let remote attackers gain privileges. Affected versions are WebCalendar prior to 1.0.0; multiple advisories (Debian DSA-766-1, Red Hat CVE note) confirm an unauthorized-access/privilege di...
CVE-2005-2320
WebCalendar before 1.0.0 does not properly restrict access to assistantedit.php, which allows remote attackers to gain privileges...
CVE-2005-2320
WebCalendar before 1.0.0 does not properly restrict access to assistantedit.php, which allows remote attackers to gain privileges...
CVE-2005-2320
WebCalendar before 1.0.0 does not properly restrict access to assistantedit.php, which allows remote attackers to gain privileges...
CVE-2002-2065
WebCalendar 0.9.34 and earlier is affected by an insecure include-file access vulnerability. When the product is built with “browsing in includes directory” enabled, remote attackers can read arbitrary .inc files from the web root. Root cause: insecure include-path handling allows reading local i...
CVE-2002-2065
WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root...
WebCalendar assistant_edit.php Unauthorized Access
The remote version of WebCalendar fails to restrict access to the script 'assistantedit.php'. An attacker can use this script to change assistants and to display all users in the system even when the 'Public access can view other users' setting has been disabled. %NASLMINLEVEL 70300 C Tenable...
[SA15788] WebCalendar "assistant_edit.php" Security Bypass
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
WebCalendar -- unauthorized access vulnerability
SecurityFocus reports that WebCalendar is affected by an unauthorized access vulnerability. The vulnerability is caused by improper checking of the authentication mechanism before access is being permitted to the "assistantedit.php" file...