CVE-2017-17635

The CVE-2017-17635 entry concerns MLM Forex Market Plan Script version 2.0.4, with a SQL Injection vulnerability exploitable via input parameters: news_detail.php newid and event_detail.php eventid. Public records (NVD, CNVD, CVE List) confirm the affected script and the injection vector, indicat...

1WebCalendar 4.0 viewEvent.cfm EventID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...

CVE-2013-3961

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

CVE-2013-3961

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

Sql injection

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

ColdCalendar 2.06 - SQL Injection

!/usr/bin/python ColdGen - coldcalender v2.06 Remote 0day SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purposes only. Do not use this code to do anything...

Sql injection

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...

Sql injection

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

FairSoft S.Mini web Busines Prelease & Calendar asp Sql injection

thnx bro FairSoft S.Mini web Busines Prelease Calendar asp Sql injection include patch...ocf,ns ocf/Calendar/ViewEvent.asp,ns/Calendar/ViewEvent.asp,aboutus/newsroom/ViewPressRelease.asp Credit : CodeXpLoder'tq Mail : codexploderathotmaildotcom Site : codexploder.biyosecurity.net,biyofrm.com Sour...

aspWebCalendar 4.5 (calendar.asp eventid) SQL Injection Vulnerability

No description provided by source. Title : aspWebCalendar Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptdungeon.com/script.php?ScriptID=4306 $$ : free S.Page : http://fullrevolution.com http://target/path/calendar.asp?action=viewevent&eventid=SQL Exampl...

Sql injection

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4...

CVE-2004-1552

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...

CVE-2004-1552

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...

CVE-2004-0036

CVE-2004-0036 describes a SQL injection in calendar.php for vBulletin Forum 2.3.x before 2.3.4, exploitable via the eventid parameter to exfiltrate data. Affected component is the calendar feature in vBulletin 2.3.x; root cause is improper input handling in eventid. Impact stated: attackers can s...

CVE-2004-0036

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...

CVE-2004-0036

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...

vBulletin Forum 2.3.xx calendar.php SQL Injection

vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...