EUVD-2004-2503

Malware in sbrugna...

EUVD-2007-2206

Malware in sbrugna...

EUVD-2007-1233

Malware in sbrugna...

EUVD-2005-4194

Malware in sbrugna...

EUVD-2003-1526

Malware in sbrugna...

EUVD-2003-1175

Malware in sbrugna...

EUVD-2008-0763

Malware in sbrugna...

EUVD-2006-1340

Malware in sbrugna...

EUVD-2009-4757

Malware in sbrugna...

EUVD-2008-1220

Malware in sbrugna...

EUVD-2007-3175

Malware in sbrugna...

CVE-2025-34113: Missing Authentication for Critical Function

An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the viewmode GET parameter in tiki-calendar.php. When the calendar module is enabled and an authenticated user has permission to access it, an attacker can inject and execu...

CVE-2005-2326

Cross-site scripting XSS vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php...

CVE-2021-36551

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

Cross site scripting

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

CVE-2021-36551

CVE-2021-36551 affects TikiWiki v21.4, specifically the tiki-calendar.php component in the Add Event module. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Exploitation details or in-the-wild status ar...

CVE-2021-36551: Improper Neutralization of Input During Web Page Generation

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

All Vulnerabilities for mopwh.gov.sy Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| mopwh.gov.sy ---|--- Open Bug Bounty...

CVE-2021-34667: Improper Neutralization of Input During Web Page Generation

The Calendarplugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $SERVER'PHPSELF' in the /calendar.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0...

Calendar_plugin <= 1.0 - Reflected Cross-Site Scripting

The Calendarplugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $SERVER'PHPSELF' in the /calendar.php file which allows attackers to inject arbitrary web scripts...