Flat Calendar 1.1 - HTML Injection

Flat Calendar 1.1 - HTML Injection !/usr/bin/perl -w Title : Flat Calendar v1.1 HTML Injection Exploit Download : http://www.circulargenius.com/flatcalendar/FlatCalendar-v1.1.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm ...

Flat Calendar 1.1 - HTML Injection

!/usr/bin/perl -w Title : Flat Calendar v1.1 HTML Injection Exploit Download : http://www.circulargenius.com/flatcalendar/FlatCalendar-v1.1.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultima...

Flat Calendar 1.1 HTML Injection

!/usr/bin/perl -w Title : Flat Calendar v1.1 HTML Injection Exploit Download : http://www.circulargenius.com/flatcalendar/FlatCalendar-v1.1.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultima...

Flat Calendar 1.1 'add.php' HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34688/info Flat Calendar is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can exploit these issues to gain unauthorized access to the...

Flat Calendar Bypass / Cross Site Scripting

Flat Calendar By-Pass / Html inj / XSS Multiple Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.04.09 Home: yildirimordulari.com / z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: Alem Hep Hacker Olm...

Flat Calendar 1.1 - 'add.php' HTML Injection

source: https://www.securityfocus.com/bid/34688/info Flat Calendar is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker t...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

Design/Logic Flaw

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

CVE-2008-6736 affects Flat Calendar 1.1. The issue: improper restriction of access to administrative functions, allowing remote attackers to add events via calAdd.php (reachable from admin/add.php) or delete events via admin/deleteEvent.php. Root cause described in sources as insufficient access ...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

Flat Calendar v1.1 Remote Permission Bypass Vulnerability

Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All iзin yaklak 654.000 sonuзtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...

flatcal-bypass.txt

Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All için yaklaşık 654.000 sonuçtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can explo...

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes ...