EUVD-2007-1108

Malware in sbrugna...

EUVD-2007-1107

Malware in sbrugna...

activecal120-multi.txt

ActiveCalendar 1.2.0, Multiple vulnerabilities Vendor site : http://www.micronetwork.de/activecalendar/ Global risk : Critical Multiples XSS : --------------- /activecalendar/data/page.php?css="alertdocument.cookie In : /data/ flatevents.php js.php mysqlevents.php m2.php m3.php m4.php xmlevents.p...

CVE-2007-1110

Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the css parameter to 1 flatevents.php, 2 js.php, 3 mysqlevents.php, 4 m2.php, 5 m3.php, 6 m4.php, 7 xmlevents.php, 8 y2.php, or 9 y3.php in data/...

CVE-2007-1111

Multiple cross-site scripting XSS vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the css parameter to 1 flatevents.php, 2 js.php, 3 mysqlevents.php, 4 m2.php, 5 m3.php, 6 m4.php, 7 xmlevents.php, 8 y2.php, or 9 y3.php in data/...

Directory traversal

Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2007-1111

Multiple cross-site scripting XSS vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the css parameter to 1 flatevents.php, 2 js.php, 3 mysqlevents.php, 4 m2.php, 5 m3.php, 6 m4.php, 7 xmlevents.php, 8 y2.php, or 9 y3.php in data/...

CVE-2007-1110

Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2007-1110

CVE-2007-1110 is a directory traversal vulnerability affecting ActiveCalendar 1.2.0, where an attacker can read arbitrary files by exploiting a .. path in the page parameter of data/showcode.php. The issue is triggered by insufficient input validation in the page parameter, allowing remote attack...

CVE-2007-1111

CVE-2007-1111 affects ActiveCalendar 1.2.0 with multiple XSS vulnerabilities in data/ via the css parameter to nine PHP scripts (flatevents.php, js.php, mysqlevents.php, m_2.php, m_3.php, m_4.php, xmlevents.php, y_2.php, y_3.php). Root cause: improper handling of user-supplied css parameter leads...

ActiveCalendar 1.2.0, Multiple vulnerabilities

ActiveCalendar 1.2.0, Multiple vulnerabilities Vendor site : http://www.micronetwork.de/activecalendar/ Global risk : Critical Multiples XSS : --------------- /activecalendar/data/page.php?css="scriptalertdocument.cookie/script In : /data/ flatevents.php js.php mysqlevents.php m2.php m3.php m4.ph...