4 matches found
E-Xoopport v3.1 eCal display.php (katid) SQL Injection Exploit
Exploit for php platform in category web applications ============================================================== E-Xoopport v3.1 eCal display.php katid SQL Injection Exploit ============================================================== = 5 this may take some minutes.. / EXPLOIT /...
CVE-2007-6365: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 day or 2 year parameter...
CVE-2007-6274: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 day or 2 year parameter...