8843 matches found
Light Weight Calendar 1.x (date) Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Light Weight Calendar 1.x date Remote Code Execution Vulnerability ==================================================================== !/usr/bin/perl Light Weight Calend...
Light Weight Calendar 1.x - 'date' Remote Code Execution
!/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use LWP::Simple; print...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...
CVE-2006-0980
CVE-2006-0980 concerns multiple XSS vulnerabilities in Jay Eckles CGI Calendar 2.7. The flaws allow an attacker to inject arbitrary web script or HTML via the year parameter in the scripts index.cgi and viewday.cgi. Affected component: CGI Calendar 2.7; entry points: index.cgi and viewday.cgi; ve...
CVE-2006-0980
Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...
cgiCal27XSS.txt
CGI Calendar XSS Vulnerability Software: CGI Calendar Version: 2.7 http://cgicalendar.sourceforge.net/ Description: an online calendar implemented using CGI technology Vulnerability: Cross-Site Scripting Exploit: /cgi-bin/calendar2/index.cgi?lang=en-us&mode=all&month=2&date=1&year=alert'xss';&db=...
Cross site scripting
Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0924
Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0924
Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0924
Affected product : Brown Bear iCal 3.10. Vulnerability : Cross-site scripting (XSS) via the Calendar Text field when adding a new event. Impact : remote attackers can inject arbitrary web script or HTML. Root cause : insufficient sanitization/input handling in the Calendar Text field. Exploitatio...
CGI Calendar XSS Vulnerability
CGI Calendar XSS Vulnerability Software: CGI Calendar Version: 2.7 http://cgicalendar.sourceforge.net/ Description: an online calendar implemented using CGI technology Vulnerability: Cross-Site Scripting Exploit:...
Web Calendar Pro - 'Dropbase.php' SQL Injection
source: https://www.securityfocus.com/bid/16789/info Web Calendar Pro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromi...
Web Calendar Pro - Dropbase.php SQL Injection
Web Calendar Pro - Dropbase.php SQL Injection source: https://www.securityfocus.com/bid/16789/info Web Calendar Pro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Sql injection
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...
CVE-2006-0835
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...
CVE-2006-0835
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...
CVE-2006-0835
CVE-2006-0835 describes an SQL injection in MitriDAT Web Calendar Pro, specifically in dropbase.php, exploitable via the tabls parameter. The flaw allows remote attackers to modify internal SQL queries and trigger a denial of service (inaccessible database). Affected product: MitriDAT Web Calenda...
XOR-wcp.txt
------=Part353323175882.1140054719148 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...
[eVuln] Magic Calendar Lite Authentication Bypass
New eVuln Advisory: Magic Calendar Lite Authentication Bypass http://evuln.com/vulns/71/summary.html --------------------Summary---------------- eVuln ID: EV0071 CVE: CVE-2006-0673 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com Software: Magic Calendar Lite Sowtware's Web...
EV0062.txt
New eVuln Advisory: 2200net Calendar system SQL Injection and Authentication Bypass Vulnerabilities http://evuln.com/vulns/62/summary.html --------------------Summary---------------- eVuln ID: EV0062 CVE: CVE-2006-0610 Software: 2200net Calendar system Sowtware's Web Site:...