PT-2021-20635

Name of the Vulnerable Software and Affected Versions: Calendar plugin WordPress plugin versions up to and including 1.0 Description: The issue arises from the use of $ SERVER'PHP SELF' in the /calendar.php file, allowing attackers to inject arbitrary web scripts. This enables Reflected Cross-Sit...

CVE-2021-34667: Improper Neutralization of Input During Web Page Generation

The Calendarplugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $SERVER'PHPSELF' in the /calendar.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0...

Calendar_plugin <= 1.0 - Reflected Cross-Site Scripting

The Calendarplugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $SERVER'PHPSELF' in the /calendar.php file which allows attackers to inject arbitrary web scripts...

myesbc.net XSS vulnerability

Open Bug Bounty ID: OBB-622393 Description| Value ---|--- Affected Website:| myesbc.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

whisperingpinesbiblecamp.com XSS vulnerability

Open Bug Bounty ID: OBB-622387 Description| Value ---|--- Affected Website:| whisperingpinesbiblecamp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bemidjigolf.com XSS vulnerability

Open Bug Bounty ID: OBB-620137 Description| Value ---|--- Affected Website:| bemidjigolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cattleusa.com XSS vulnerability

Open Bug Bounty ID: OBB-619719 Description| Value ---|--- Affected Website:| cattleusa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wios-epe.nl XSS vulnerability

Open Bug Bounty ID: OBB-573044 Description| Value ---|--- Affected Website:| wios-epe.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hypnos.ch XSS vulnerability

Open Bug Bounty ID: OBB-323042 Description| Value ---|--- Affected Website:| hypnos.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nycathedral.org XSS vulnerability

Vulnerable URL: http://www.nycathedral.org/calendar.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13350925 VIP website status:| No Coordinated Disclosure Timeline: Description...

mpitn.org XSS vulnerability

Vulnerable URL: http://mpitn.org/calendar.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

centreleonardodavinci.com XSS vulnerability

Vulnerable URL: http://www.centreleonardodavinci.com/en/calendar.php?month=4=2014%22%3E%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6552177 VIP website status:| No Check...

chicagoacs.org XSS vulnerability

Vulnerable URL: http://chicagoacs.org/calendar.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4800548 VIP website status:| No Check chicagoacs.org SSL connection:| Grade: A-...

Tiki Wiki CMS Groupware tiki-calendar.php RCE

Remote command execution vulnerability in Tiki Wiki CMS Groupware tiki-calendar.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

lpac.org XSS vulnerability

Vulnerable URL: http://lpac.org/calendar.php?month==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4549658 VIP website status:| No Check lpac.org SSL connection:| Grade: F...

cldv.ca XSS vulnerability

Vulnerable URL: http://www.cldv.ca/en/calendar.php?year=2015=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11926508 VIP website status:| No Check cldv....

MyBB < 1.6.10 Multiple Vulnerabilities

Binary data 9119.prm...

Sql injection

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2014-10015

CVE-2014-10015 is a SQL injection vulnerability in the PHPJabbers Event Booking Calendar 2.0, specifically in load-calendar.php where the vulnerable parameter is cid . The issue allows remote attackers to execute arbitrary SQL commands, as described across multiple sources (NVD entry and corrobor...

PT-2015-3659

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the "load-calendar.php" file. Recommendations For PHPJabbers Event Booking...