62 matches found
CVE-2015-5485: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Event Import page import-eventbrite-events.php in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php...
Ppim <= 1.0 (Arbitrary File Delete/XSS) Multiple Vulnerabilities
No description provided by source. Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...
Server: Privilege escalation in the calendar application
Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calendarid" GET parameter to /apps/calendar/ajax/events.php Note: Successful exploitation of this privilege escalation requires the "calendar" app to be enabl...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...
CVE-2011-4329: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...
DEBIAN-CVE-2010-5049
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...
CVE-2010-5049: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...
Zabbix 1.8.1 SQL Injection
Exploit Title: Zabbix =0' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0' at line 1 mysqlfetchassoc: supplied argument is n...
Zabbix <= 1.8.1 SQL Injection Vulnerability
Exploit for php platform in category web applications =========================================== Zabbix =0' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ORDER BY...
CVE-2008-4426
Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...
CVE-2008-4426: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...
Ppim <= 1.0 (Arbitrary File Delete/XSS) Multiple Vulnerabilities
No description provided by source. Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...
pPIM 1.0 - Arbitrary File Delete Cross-Site Scripting
pPIM 1.0 - Arbitrary File Delete Cross-Site Scripting Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...
pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting
Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...
Sql injection
SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
CVE-2008-1859
CVE-2008-1859 is a confirmed SQL injection in iScripts SocialWare . The vulnerability resides in events.php and is exploitable via the id parameter in a show action, enabling remote attackers to execute arbitrary SQL commands. This is supported by multiple sources within the connected documents, ...
CVE-2008-1859
SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
CVE-2008-1859: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
WorkingOnWeb Events.PHP SQL注入漏洞
WorkingOnWeb是一款基于PHP的WEB应用程序。 WorkingOnWeb不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'Events.PHP'脚本对用户提交的'idevent'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 Flor de Utopia WorkingOnWeb 2.0.1400 目前没有解决方案提供： http://www.workingonweb.com/...