8871 matches found
Active Server Corner ASP Calendar 1.0 - Administrative Access
source: https://www.securityfocus.com/bid/11931/info ASP Calendar is reported prone to an unauthorized administrative access vulnerability. An unauthorized remote attacker can access an administrative script and potentially gain administrative access to the application. It is believed that this...
Active Server Corner ASP Calendar 1.0 - Administrative Access
Active Server Corner ASP Calendar 1.0 - Administrative Access source: https://www.securityfocus.com/bid/11931/info ASP Calendar is reported prone to an unauthorized administrative access vulnerability. An unauthorized remote attacker can access an administrative script and potentially gain...
CVE-2004-1021
CVE-2004-1021 affects iCal prior to 1.5.4 on Mac OS X 10.2.3 and later. The underlying issue is that iCal does not alert the user for alarms in calendars, enabling an attacker to cause the execution of programs and sending of email via alarms. The description and public references in the provided...
CVE-2004-0275
SQL injection vulnerability in calendardownload.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter...
waraxe-2004-SA038.txt
================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...
[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]
================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...
webcalendar.txt
--------------------------------------------------------------------------- Multiple Vulnerabilities in WebCalendar --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...
Multiple Vulnerabilities in WebCalendar
--------------------------------------------------------------------------- Multiple Vulnerabilities in WebCalendar --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...
CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file...
CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file...
CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file...
DEBIAN-CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file...
PhpWebSite calendar module contains a SQL injection vulnerability
Overview The PhpWebSite contains an SQL injection vulnerability that may allow malicious users to execute SQL queries on a server with the privileges of the PhpWebSite administrator. Description PhpWebSite is an open-source web content management system that includes a web-based calendar module t...
CVE-2004-1597
RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service device reboot and possibly data corruption via a calendar message with a long Location field, which triggers a watchdog while the message is being stored...
aspWebCalendar.txt
1Introduction "aspWebCalendar is an .asp Active Server Pages script that allows you to easily create an online events calendar that supports multiple users. Easy installation and usage are the key features of aspWebCalendar. The script contains a text file with a few configuration variables that...
Debian DSA-419-1 : phpgroupware - missing filename sanitising, SQL injection
The authors of phpgroupware, a web-based groupware system written in PHP, discovered several vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0016 In the 'calendar' module, 'save extension' was not enforced for holiday files. As a...
CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file...
CVE-2004-0793
The CVE-2004-0793 issue affects the calendar program in bsdmainutils 6.0–6.0.14, which does not drop root privileges when run with -a, allowing an attacker to execute arbitrary commands via a crafted calendar event file. The underlying cause is privilege retention when processing event files, ena...
CVE-2004-0016
Summary (CVE-2004-0016) : The phpGroupWare calendar module (version 0.9.14) fails to enforce the save extension for holiday files, allowing server-side PHP files to be created and executed. This is a remote vulnerability with a CVSS v2 base score of 7.5 (High). Related advisories patch the issue ...