EUVD-2008-6289

Malware in sbrugna...

CVE-2021-24225

The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue...

Server: Calendar export: Authorization Bypass Through User-Controlled Key

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calid" GET parameter to export.php in /apps/calendar/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Sql injection

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2008-6319

SQL injection vulnerability in calendarevent.cfm in CFCalendar allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2008-6319

SQL injection vulnerability in calendarevent.cfm in CFCalendar allows remote attackers to execute arbitrary SQL commands via the calid parameter...