EUVD-2008-6374

Malware in sbrugna...

EUVD-2008-6086

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in addcalendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter...

CVE-2008-6404

CVE-2008-6404 is a documented cross-site scripting (XSS) vulnerability in add_calendars.php of eXtrovert Software Thyme 1.3, exploitable via the callback parameter. Multiple sources (NVD, CVE listings) corroborate that remote attackers can inject arbitrary web script or HTML. The NVD entry assign...

Sql injection

SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...

CVE-2008-6116

SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...

CVE-2008-6116

The CVE-2008-6116 entry describes a SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! that allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php. Affected component: Thyme 1.0 for Joomla!, vulnerability type:...

Thyme <= 1.3 (export_to) Local File Inclusion Vulnerability

No description provided by source. | Theme Local File Inclusion / Registerglobals: off | | Version: = 1.3 | | Dork: Thyme 1. © 2006 eXtrovert Software LLC. All rights reserved | | Founded by: cheverokatgmail.com |...

Thyme 1.3 - export_to Local File Inclusion

Thyme 1.3 - exportto Local File Inclusion | Theme Local File Inclusion / Registerglobals: off | | Version: = 1.3 | | Dork: Thyme 1. © 2006 eXtrovert Software LLC. All rights reserved | | Founded by: cheverokatgmail.com |...

Joomla! Component Thyme 1.0 - SQL Injection

Joomla! Component Thyme 1.0 - SQL Injection Author: Ded MustD!e Google Dork: comthyme Exploit:...

Joomla! Component Thyme 1.0 - SQL Injection

Author: Ded MustD!e Google Dork: comthyme Exploit: http://www.site.com/index.php?option=comthyme&calendar=1&category=1&d=1&m=1&y=2008&Itemid=1&event=1'+union+select+1,2,3,4,5,6,7,8,9,0,1,2,concatusername,0x3a,password,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4+from+josusers/...