EUVD-2010-0380

Malware in sbrugna...

EUVD-2010-0379

Malware in sbrugna...

CVE-2010-0349

Cross-site scripting XSS vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable...

Cross site scripting

Cross-site scripting XSS vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable...

CVE-2010-0349

Cross-site scripting XSS vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable...

CVE-2010-0349

CVE-2010-0349 concerns the WebCalenderC3 web calendar from C3 Corp. A cross-site scripting (XSS) flaw exists in WebCalenderC3 v0.32 and earlier, with the vendor unable to reproduce it but a patch/security-enhanced version was released. The vulnerability may allow arbitrary script execution in a u...

CVE-2010-0348

Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors...

Directory traversal

Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-0348

Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-0348

CVE-2010-0348 concerns WebCalenderC3 by C3 Corp. (0.32 and earlier). The vulnerability is a directory traversal flaw that could let a remote attacker read arbitrary files on the server via unknown vectors. Public sources (JVN/NVD) confirm the affected product and version range; no exploitation de...