8867 matches found
GCALDaemon Remote DoS
Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via 1 a student's email address, 2 the year parameter to genbrws/Student/calmonth.php3, and other unspecified vectors related to the calendar. NOTE: the provenance of thi...
CVE-2007-4945
Multiple cross-site scripting XSS vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via 1 a student's email address, 2 the year parameter to genbrws/Student/calmonth.php3, and other unspecified vectors related to the calendar. NOTE: the provenance of thi...
CVE-2007-4945
Multiple cross-site scripting XSS vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via 1 a student's email address, 2 the year parameter to genbrws/Student/calmonth.php3, and other unspecified vectors related to the calendar. NOTE: the provenance of thi...
CVE-2007-4724
Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...
CVE-2007-4724
CVE-2007-4724 describes a CSRF vulnerability in the Apache Tomcat calendar examples app, specifically in the file cal2.jsp of the calendar example. The issue allows a remote attacker to add events as arbitrary users by supplying the time and description parameters, enabling unauthorized calendar ...
Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability
Apache Tomcat/4.1.31 ships with built in examples. One of the example calendar.jsp suffers from input validation error and could be exploited for cross site scriptingand cross site request forgery. XSS http://myserver:myport/examples/jsp/cal/cal2.jsp?time=8am3cscript3eale rt"XSS!"3c2fscript3e XSR...
Apache Tomcat crossite scripting
Crossite scripting in sendmail.jsp, calendar and CookieExample example scripts...
moonware-multi.txt
Moonware Software Multiple Vulnerabilities by s0cratex -------- MSN: s0cratexatnasadotgov Moonware Homepage: http://dalemooney.lost-soldiers.com I. Moon Gallery ---- ------- Bug: Arbitrary file upload Dork: "Powered by: Dale Mooney Gallery" Details: The file /config/upload.php don't have any...
Moonware Software Multiple Vulnerabilities
Moonware Software Multiple Vulnerabilities by s0cratex -------- MSN: s0cratexatnasadotgov Moonware Homepage: http://dalemooney.lost-soldiers.com I. Moon Gallery ---- ------- Bug: Arbitrary file upload Dork: "Powered by: Dale Mooney Gallery" Details: The file /config/upload.php don't have any...
Dale Mooney Calendar Events - 'Viewevent.php' SQL Injection
source: https://www.securityfocus.com/bid/25456/info Calendar Events is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...
Dale Mooney Calendar Events - Viewevent.php SQL Injection
Dale Mooney Calendar Events - Viewevent.php SQL Injection source: https://www.securityfocus.com/bid/25456/info Calendar Events is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...
CVE-2007-4247
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...
Design/Logic Flaw
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...
CVE-2007-4247
CVE-2007-4247 concerns Windows Calendar on Microsoft Windows Vista. The vulnerability arises when processing a malformed ICS file, leading to a NULL dereference and a persistent application crash, i.e., a denial of service. Affected component is the Windows Calendar feature in Vista; exploitation...
CVE-2007-4247
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...
Microsoft Windows Calendar ICS文件处理拒绝服务漏洞
BUGTRAQ ID: 25201 Microsoft Windows Calendar是Vista系统中所捆绑的行程、日历软件。 Calendar的实现上存在漏洞，本地攻击者可能利用此漏洞导致Vista系统重启后崩溃。 如果在Calendar中设置了提醒的话，则导入畸形的ISC文件的话就可能触发空指针引用，导致Calendar崩溃，且在每次重启Vista后都会崩溃。 Microsoft Windows Calendar - Microsoft Windows Vista 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via 1 the who parameter to showuser; and other vectors involving 2 calendar mode, 3 bulletin board mode, 4 room names, and 5 uploaded file names...
CVE-2007-3822
Multiple cross-site scripting XSS vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via 1 the who parameter to showuser; and other vectors involving 2 calendar mode, 3 bulletin board mode, 4 room names, and 5 uploaded file names...
CVE-2007-3822
Multiple cross-site scripting XSS vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via 1 the who parameter to showuser; and other vectors involving 2 calendar mode, 3 bulletin board mode, 4 room names, and 5 uploaded file names...