Cross site scripting

Cross-site scripting XSS vulnerability in addcalendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter...

CVE-2008-6404

CVE-2008-6404 is a documented cross-site scripting (XSS) vulnerability in add_calendars.php of eXtrovert Software Thyme 1.3, exploitable via the callback parameter. Multiple sources (NVD, CVE listings) corroborate that remote attackers can inject arbitrary web script or HTML. The NVD entry assign...

CVE-2008-6404: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in addcalendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter...

Sql injection

SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...

CVE-2008-6116

SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...

CVE-2008-6116

The CVE-2008-6116 entry describes a SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! that allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php. Affected component: Thyme 1.0 for Joomla!, vulnerability type:...

CVE-2008-6116: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...