Mambo Module Calendar (Agenda) 1.5.5 RFI Vulnerability

Exploit for unknown platform in category web applications ====================================================== Mambo Module Calendar Agenda 1.5.5 RFI Vulnerability ====================================================== ================================================================== Mambo...

Mambo Module Calendar (Agenda) 1.5.5 RFI Vulnerability

No description provided by source. ================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...

Mambo Module Calendar (Agenda) 1.5.5 - Remote File Inclusion

Mambo Module Calendar Agenda 1.5.5 - Remote File Inclusion ================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro ,...

Mambo Module Calendar (Agenda) 1.5.5 - Remote File Inclusion

================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...

[SECURITY] Fedora Core 5 Update: evolution-2.6.3-2.fc5

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora Core 6 Update: evolution-2.8.3-2.fc6

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

CVE-2007-1845

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

Sql injection

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

CVE-2007-1845

SQL injection vulnerability in showevent.php in the Expanded Calendar calendarpanel 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the mmonth parameter...

C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the searchtext parameter to a /search, or the 2 message parameter to b /calendar or c /subscribe...

CVE-2007-1646

Multiple cross-site scripting XSS vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the searchtext parameter to a /search, or the 2 message parameter to b /calendar or c /subscribe...

CVE-2007-1639

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

Unrestricted file upload

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

CVE-2007-1639

PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...

**SubHub v2.3.0**

SubHub v2.3.0 Site: http://www.subhub.com/ & others that use this software Type of Expliot: XSS Version : 2.3.0 Discover: T--T Bug in : /search?searchtext=insert xss here /calendar/?message=insert xss here /subscribe?message=insert xss here - - - - - - - - - - - - - - - - Exploit POC...

Gnome Evolution calendar format string vulnerability

Format string vulnerability on shared memo parsing...

DEBIAN-CVE-2007-1002

Format string vulnerability in the writehtml function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo...

Sql injection

Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 unspecified vectors to the a calendar and 2 search modules, and an 2 unspecified cookie when the user logs out...

n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.006 14-Mar-2007 Vendor: Mayflower GmbH, http://www.mayflower.de Affected Products: PHProjekt 5.2.0 Vulnerability: Privilege escalation Risk: HIGH Vendor communication: 2006/12/31 initial notification of Mayflower 2007/01/02...