totalcalendar 2.4 (bsql/lfi) Multiple Vulnerabilities

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || TotalCalendar 2.4 bSQL/LFI Multiples Remote Vulnerability Discovered By : Moudi Contact : [email protected]...

CVE-2009-4974

TotalCalendar 2.4 is affected by a directory traversal vulnerability in box_display.php that allows remote attackers to read arbitrary files via a .. sequence in the box parameter. The issue is confirmed in multiple feeds (CVE-2009-4974; OpenVAS entry cites TotalCalendar SQL Injection and Directo...

CVE-2009-4974: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in boxdisplay.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the box parameter...

TotalCalendar 2.4 (bSQL/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ TotalCalendar 2.4 bSQL/LFI Multiple Remote Vulnerabilities ============================================================ / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /|...

totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || TotalCalendar 2.4 bSQL/LFI Multiples Remote Vulnerability Discovered By : Moudi Contact : Download :...

totalcalendar 2.4 - Blind SQL Injection Local File Inclusion

totalcalendar 2.4 - Blind SQL Injection Local File Inclusion / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || TotalCalendar 2.4 bSQL/LFI Multiples Remote Vulnerability Discovered By : Moudi...