WordPress Appointment Booking Calendar Plugin <= 1.1.7 - Multiple XSS

These vulnerabilities allow an attacker to inject an arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...

CVE-2014-10001

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...

Directory traversal

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...

CVE-2014-10001

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...

CVE-2014-10010

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...

CVE-2014-10010

The CVE-2014-10010 entry describes a directory traversal flaw in PHPJabbers Appointment Scheduler 2.0. The vulnerability occurs in the pjBackup controller’s pjActionDownload action, where an attacker can manipulate the id parameter (using ..) to read arbitrary files. Impact is reading sensitive f...

CVE-2014-10001

CVE-2014-10001 affects PHPJabbers Appointment Scheduler 2.0. The vulnerability set consists of CSRF flaws that enable an attacker to hijack administrator sessions for requests crafted to the application, including (1) XSS via the i18n[1][name] parameter in a pjActionCreate action targeting the pj...

CVE-2014-10001: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...

PT-2015-3654

Name of the Vulnerable Software and Affected Versions PHPJabbers Appointment Scheduler version 2.0 Description A directory traversal issue allows remote attackers to read arbitrary files by providing a .. dot dot in the id parameter in a 'pjActionDownload' action to the 'pjBackup' controller...

CVE-2014-10010: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...

PT-2015-3615

Name of the Vulnerable Software and Affected Versions PHPJabbers Appointment Scheduler version 2.0 Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities...

Js-appointment <= 1.5 - SQL Injection

The Js-appointment WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Js-appointment plugin <= 1.5 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Js-appointment plugin = 1.5 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/js-appointment.1.5.zip Version: 1.5 tested Note:...

Appointment Booking Pro Joomla Component LFI Vulnerability

No description provided by source. Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / /...

PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities

No description provided by source. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

joomla component appointinator 1.0.1 - Multiple Vulnerabilities

No description provided by source. Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Name Appointinator Vendor http://appointinator.chemeia.info Versions Affected 1.0.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...

WordPress Appointment Scheduler Plugin <= 1.5 - XSS

Because of this vulnerability in js/test.php, the attackers can inject arbitrary web script or HTML via the lang parameter. Solution Update the plugin...

PHPJabbers Appointment Scheduler 2.0多个漏洞

No description provided by source. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities

Appointment Scheduler version 2.0 suffers from file disclosure, cross site request forgery, and cross site scripting vulnerabilities. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact ...