EasyPHPCalendar 6.1.56.2.x - datePicker.php?serverPath Remote File Inclusion

EasyPHPCalendar 6.1.56.2.x - datePicker.php?serverPath Remote File Inclusion source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-si...

EasyPHPCalendar 6.1.56.2.x - calendar.php?serverPath Remote File Inclusion

EasyPHPCalendar 6.1.56.2.x - calendar.php?serverPath Remote File Inclusion source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...

EasyPHPCalendar 6.1.56.2.x - setupSQL.php?serverPath Remote File Inclusion

EasyPHPCalendar 6.1.56.2.x - setupSQL.php?serverPath Remote File Inclusion source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...

EasyPHPCalendar 6.1.56.2.x - popup.php?serverPath Remote File Inclusion

EasyPHPCalendar 6.1.56.2.x - popup.php?serverPath Remote File Inclusion source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-si...

EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-si...

CVE-2005-1144

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message...

CVE-2005-1143

EasyPHPCalendar vulnerability CVE-2005-1143: XSS in index.php via the yr parameter, affecting versions prior to 6.2.8. Remote code execution of arbitrary scripts/HTML possible as described. Remediation: upgrade to 6.2.8 or later. No exploitation details provided in the connected documents.

CVE-2005-1143

Cross-site scripting XSS vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter...

CVE-2005-1144

Summary : popup.php in EasyPHPCalendar before 6.2.8 is vulnerable to information disclosure via an invalid ev parameter, which reveals the web server’s full pathname in a PHP error message. Affected software : EasyPHPCalendar (prior to 6.2.8). Root cause : improper handling/display of the ev para...

CVE-2005-1143: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter...

CVE-2005-1144: Undefined Security Weakness

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message...

CVE-2005-1143

Cross-site scripting XSS vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter...

CVE-2005-1144

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message...