CVE-2005-1833: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...

CVE-2005-1833

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...

CVE-2004-1785

The provided connected documents confirm a SQL injection vulnerability in Invision Power Board 1.3, specifically in the calendar.php component. The issue allows remote attackers to inject arbitrary SQL via the m parameter that controls the $this->chosen_month variable, enabling potential data ...

CVE-2004-1785

SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this-chosenmonth variable...

CVE-2002-1660

calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter...

CVE-2002-1660

CVE-2002-1660 : A vulnerability in calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. Affected product: vBulletin (calendar.php) prior to version 2.2.0. Root cause: unsafely handling shell commands throug...

CVE-2004-1785: Undefined Security Weakness

SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this-chosenmonth variable...

CVE-2002-1660: Improper Neutralization of Special Elements used in an OS Command

calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter...

CVE-2003-1185: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including 1 Admin-Center, 2 Announcements, 3 admin/calendar.php, and 4 showevent.php...

CVE-2004-1423: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office VLO and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpcrootpath parameter to 1 includes/calendar.ph...

CVE-2004-2511

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...

CVE-2004-0036

CVE-2004-0036 describes a SQL injection in calendar.php for vBulletin Forum 2.3.x before 2.3.4, exploitable via the eventid parameter to exfiltrate data. Affected component is the calendar feature in vBulletin 2.3.x; root cause is improper input handling in eventid. Impact stated: attackers can s...

CVE-2004-0036: Undefined Security Weakness

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...

CVE-2004-0067

CVE-2004-0067 describes multiple cross-site scripting (XSS) vulnerabilities in phpGedView prior to 2.65. The issue allows remote attackers to inject arbitrary HTML or JavaScript through numerous PHP/WEB pages (e.g., descendancy.php, index.php, individual.php, login.php, relationship.php, source.p...

vBulletin Forum 2.3.xx calendar.php SQL Injection

vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...

CVE-2004-1785

SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this-chosenmonth variable...