EUVD-2020-26776

Malware in sbrugna...

EUVD-2021-8139

Malicious code in bioql PyPI...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

Cross site scripting

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20725

CVE-2021-20725 is a reflected cross-site scripting vulnerability in the admin page of PHP Factory Calendar01 free edition v1.0.1 and earlier. The issue allows a remote attacker to inject arbitrary script via unspecified vectors, potentially causing scripts to run in a victim’s browser. Public det...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

PT-2021-14182

Name of the Vulnerable Software and Affected Versions: Calendar01 versions 1.0.1 and earlier Description: A reflected cross-site scripting issue in the admin page allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For Calendar01 versions 1.0.1 and...

CVE-2021-20725: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

Php Factory Calendar01 跨站脚本漏洞

Php Factory Calendar01 is a CMS Content Management System for building reservation management websites from PHP Factory Japan. A cross-site scripting vulnerability exists in Calendar01 1.0.1, which stems from insufficient sanitization of user-supplied data in administrative pages. A remote attack...

JVN#53910556: Multiple cross-site scripting vulnerabilities in multiple PHP Factory products

Multiple products provided by PHP Factory contain multiple cross-site scripting vulnerabilities listed below. Reflected cross-site scripting vulnerability CWE-79 - CVE-2021-20723 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.7 CVSS v2|...

CVE-2020-5615

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5615

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5615

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5615

The CVE-2020-5615 entry concerns CSRF in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 that can allow remote attackers to hijack administrator authentication via unspecified vectors. Public sources in the connected documents identify affected products as Calendar01 and Cal...

CVE-2020-5616: Improper Authentication

Calendar01, Calendar02, PKOBO-News01, PKOBO-vote01, Telop01, Gallery01, CalendarForm01, and Link01 Calendar01 free edition ver1.0.0, Calendar02 free edition ver1.0.0, PKOBO-News01 free edition ver1.0.3 and earlier, PKOBO-vote01 free edition ver1.0.1 and earlier, Telop01 free edition ver1.0.0,...

PT-2020-18586

Name of the Vulnerable Software and Affected Versions Calendar01 version 1.0.0 Calendar02 version 1.0.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. Recommendations For Calendar01 version 1.0.0, update to a version tha...