Lucene search
+L

6 matches found

NVD
NVD
•added 2011/10/07 10:55 a.m.•22 views

CVE-2010-4881

Multiple cross-site request forgery CSRF vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to hijack the authentication of unspecified victims for requests that use the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

6.8CVSS7.3AI score0.00639EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2011/10/07 10:00 a.m.•38 views

CVE-2010-4881

Multiple cross-site request forgery CSRF vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to hijack the authentication of unspecified victims for requests that use the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

7.3AI score0.00639EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/07 12:00 a.m.•2 views

CVE-2010-4881: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to hijack the authentication of unspecified victims for requests that use the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

6.8CVSS5.9AI score0.00639EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/07 12:00 a.m.•3 views

CVE-2010-4880: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in calendar.class.php in ApPHP Calendar ApPHP CAL allow remote attackers to inject arbitrary web script or HTML via the 1 categoryname, 2 categorydescription, 3 eventname, or 4 eventdescription parameter...

4.3CVSS5.9AI score0.01089EPSS
SaveExploits1References2
NVD
NVD
•added 2006/12/10 9:28 p.m.•20 views

CVE-2006-6452

Multiple cross-site scripting XSS vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 topics.php, 2 submit.php, and 3 class/calendar.class.php...

6.8CVSS5.9AI score0.01238EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/10 12:00 a.m.•4 views

CVE-2006-6452: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 topics.php, 2 submit.php, and 3 class/calendar.class.php...

6.8CVSS5.9AI score0.01238EPSS
SaveExploits0References1
Rows per page
Query Builder