9 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...
CVE-2011-5045
PHP Booking Calendar 10e is vulnerable to a cross-site scripting (XSS) flaw in details_view.php via the page_info_message parameter. The underlying issue is insufficient sanitization of user-supplied data, enabling arbitrary script execution in the victim’s browser. OpenVAS entries describe the v...
CVE-2011-5045: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...
PHP Booking Calendar 10 d Remote SQL Injection Exploit
No description provided by source. Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Ja...
CVE-2006-1422: Undefined Security Weakness
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...
phpBookingCalendar 1.0c - details_view.php SQL Injection
phpBookingCalendar 1.0c - detailsview.php SQL Injection PoC by undefined1 @ bash-x.net/undef/ phpBookingCalendar = 1.0c "A PHP/MySQL Booking Calendar Application." http://www.jjwdesign.com/bookingcalendar.html phpBookingCalendar is prone to a sql injection attack. the sql injection works regardle...
phpBookingCalendar <= 1.0c [details_view.php] Remote SQL Injection
Exploit for unknown platform in category web applications ================================================================== phpBookingCalendar = 1.0c detailsview.php Remote SQL Injection ================================================================== PoC by undefined1 @ bash-x.net/undef/...
phpBookingCalendar <= 1.0c [details_view.php] Remote SQL Injection
No description provided by source. PoC by undefined1 @ bash-x.net/undef/ phpBookingCalendar = 1.0c "A PHP/MySQL Booking Calendar Application." http://www.jjwdesign.com/bookingcalendar.html phpBookingCalendar is prone to a sql injection attack. the sql injection works regardless of any...
phpBookingCalendar 1.0c - 'details_view.php' SQL Injection
PoC by undefined1 @ bash-x.net/undef/ phpBookingCalendar = 1.0c "A PHP/MySQL Booking Calendar Application." http://www.jjwdesign.com/bookingcalendar.html phpBookingCalendar is prone to a sql injection attack. the sql injection works regardless of any magicquotesgpc settings...