Sql injection

SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...

CVE-2007-2621

CVE-2007-2621 affects Thyme Calendar 1.3. The event_view.php script uses the eid parameter to build a database query without proper sanitization, enabling SQL injection. This allows remote attackers to run arbitrary SQL commands against the database. The vulnerability is documented across multipl...

CVE-2007-2621

SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...

Thyme Calendar 1.3 Remote SQL Injection Vulnerability

No description provided by source. Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION --------------------------...

Thyme Calendar 1.3 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Thyme Calendar 1.3 Remote SQL Injection Vulnerability ===================================================== Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord...

Thyme Calendar 1.3 - SQL Injection

Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists in Thyme Calendar 1.3 and possibly...

Thyme Calendar 1.3 - SQL Injection

Thyme Calendar 1.3 - SQL Injection Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists i...

tomcat XSS in example webapps

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

USN-458-1: MoinMoin vulnerabilities

A flaw was discovered in MoinMoin's error reporting when using the AttachFile action. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication information for the domain where...

[SECURITY] Fedora Core 6 Update: evolution-data-server-1.8.3-6.fc6

The evolution-data-server package provides a unified backend for programs that work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora Core 5 Update: evolution-data-server-1.6.3-4.fc5

The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

CVE-2007-2212

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2211

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

DSA-1279-1 webcalendar - missing input sanitising

Bulletin has no description...

Mambo module Calendar (Agenda) <= 155 (com_calendar.php) Multiple RFI Vuln

================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2049

CVE-2007-2049 affects the Calendar Module (com_calendar) 1.5.5 in Mambo. The vulnerability arises from multiple PHP remote file inclusion flaws that allow an attacker to supply a URL via the absolute_path parameter to either com_calendar.php or mod_calendar.php, enabling remote code execution. NV...