EasyPHPCalendar 6.1.5/6.2.x datePicker.php serverPath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these...

PT-2013-3488

Name of the Vulnerable Software and Affected Versions Easy PHP Calendar versions 6.x through 7.0.12 Description The issue concerns multiple cross-site scripting XSS vulnerabilities found in the index.php and datePicker.php files. These vulnerabilities allow remote attackers to inject arbitrary we...

CVE-2013-1955: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 index.php and 2 datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

EasyPHPCalendar 6.1.56.2.x - datePicker.php?serverPath Remote File Inclusion

EasyPHPCalendar 6.1.56.2.x - datePicker.php?serverPath Remote File Inclusion source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...