496 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...
CVE-2012-0846
Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...
CVE-2012-0846
CVE-2012-0846 is an XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 that allows remote injection of arbitrary scripts/HTML via the Location variable. The connected records for CVE-2012-5384 describe additional XSS vectors affecting the same WebCalendar product (including parameters in edit_e...
PT-2012-2902
Name of the Vulnerable Software and Affected Versions WebCalendar version 1.2.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Location variable. This can lead to the execution of malicious scripts on the client-side. Recommendation...
CVE-2012-0846: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...
Fedora Update for WebCalendar FEDORA-2012-1898
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for WebCalendar FEDORA-2012-1898
Check for the Version of WebCalendar OpenVAS Vulnerability Test Fedora Update for WebCalendar FEDORA-2012-1898 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
FreeBSD Ports: WebCalendar-devel
The remote host is missing an update to the system as announced in the referenced advisory. VID 18dffa02-946a-11e1-be9d-000c29cc39d3 OpenVAS Vulnerability Test $ Description: Auto generated from VID 18dffa02-946a-11e1-be9d-000c29cc39d3 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: WebCalendar-devel
The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...
WebCalendar Pre-Auth PHP Code Execution
Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...
WebCalendar Pre-Auth PHP Code Execution
Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...
WebCalendar Pre-Auth PHP Code Execution
Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...
WebCalendar Pre-Auth PHP Code Execution
Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...
WebCalendar 1.2.4 RCE
Remote command execution vulnerability in WebCalendar install/index.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
FreeBSD : WebCalendar -- multiple vulnerabilities (18dffa02-946a-11e1-be9d-000c29cc39d3)
Hanno Boeck reports : Fixes are now available for various security vulnerabilities including LFI local file inclusion, XSS cross site scripting and others. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...
WebCalendar 1.2.4 Remote Code Execution
?php / ----------------------------------------------------------------------- WebCalendar = 1.2.4 install/index.php Remote Code Executionn Exploit ----------------------------------------------------------------------- author..........: Egidio Romano aka EgiX mail............:...
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebCalendar 1.2.4...
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
Exploit for linux platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
WebCalendar 1.2.4 - Remote Code Injection (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebCalendar 1.2.4...