EUVD-2009-4398

Malware in sbrugna...

Joomla Extcalendar Blind SQL Injection

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author : Lagripe-Dz 1 contact : [email protected] 8 Home :...

Joomla! Component com_extcalendar - Blind SQL Injection

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author : Lagripe-Dz 1 contact : [email protected] 8 Home :...

CVE-2009-4431

CVE-2009-4431 is a PHP remote file inclusion in cal_popup.php of the Joomla! JCal Pro (com_jcalpro/JCP) component version 1.5.3.6. The underlying issue is a vulnerability in the mosConfig_absolute_path parameter that enables remote attackers to execute arbitrary PHP code through a crafted URL. Af...

CVE-2009-4431: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in calpopup.php in the Anything Digital Development JCal Pro aka comjcalpro or JCP component 1.5.3.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Joomla JCalPro 1.5.3.6 Remote File Inclusion

Joomla Component comjcalpro Remote FiLe include RFI Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 13 December, 2009 Software Information + Vendor : http://www.anything-digital.com + Download : http://dev.anything-digital.com/jcal-pro-downloads.html + version...

Joomla Component com_jcalpro Remote FiLe include RFI

No description provided by source. Joomla Component comjcalpro Remote FiLe include RFI Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 13 December, 2009 Software Information + Vendor : http://www.anything-digital.com + Download :...

CVE-2006-3094: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 calevent.php and 2 calpopup.php...

Calendarix 0.7.20060401, SQL Injection Vulnerabilities

----------------------------------------------------- Advisory id: FSA:018 Author: Federico Fazzi Date: 15/06/2006, 23:36 Sinthesis: Calendarix 0.7.20060401, SQL Injection Vulnerabilities Type: low Product: http://www.calendarix.com/ Patch: unavailable...