298 matches found
PHP iCalendar Cookie Data Traversal Local File Inclusion
The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The version of PHP iCalendar installed on the remote host fails to sanitize input to cookie data normally used to store language and template user preferences before using it in a PHP...
php iCalendar <= 2.21 (publish.ical.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "php iCalendar =2.21 publish.ical.php remote cmmnds xctn\r\n"; echo "by rgod rgodATautisticiDOTorg\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "this works if "phpicalendarpublishing" is set to 1 in...
php iCalendar <= 2.21 (publish.ical.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== php iCalendar autisticiorg\r\n"; echo "this works if "phpicalendarpublishing" is set to 1 in config.inc.php\r\n\r\n"; short explaination: phpICal lets users...
php iCalendar <= 2.21 (Cookie) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "php iCalendar =2.21 "cookielanguage"/"cookiestyle" remote cmmnds xctn\r\n"; echo "- arbitrary local inclusion through cookies\r\n"; echo "by rgod rgodATautisticiDOTorg\r\n"; echo "site:...
PHP iCalendar 2.21 - cookie Remote Code Execution
PHP iCalendar 2.21 - cookie Remote Code Execution !/usr/bin/php -q -d shortopentag=on arbitrary local inclusion through cookies\r\n"; echo "by rgod rgodautisticiorg\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; short explaination: phpICal stores language & template user preferences...
php iCalendar <= 2.21 (Cookie) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ php iCalendar arbitrary local inclusion through cookies\r\n"; echo "by rgod rgodautisticiorg\r\n"; short explaination: phpICal stores language & template user preferences inside...
PHP iCalendar 2.21 - 'cookie' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on arbitrary local inclusion through cookies\r\n"; echo "by rgod rgodautisticiorg\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; short explaination: phpICal stores language & template user preferences inside cookies. Theese values are used to include...
PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on autisticiorg\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "this works if "phpicalendarpublishing" is set to 1 in config.inc.php\r\n\r\n"; short explaination: phpICal lets users upload/delete files in WebDAV style through PUT / DELETE method;...
CVE-2006-0648
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the 1 getdate and possibly other parameters used in the replacefiles function in search.php and 2 $file variable as used in the parse function in...
Directory traversal
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the 1 getdate and possibly other parameters used in the replacefiles function in search.php and 2 $file variable as used in the parse function in...
CVE-2006-0648
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the 1 getdate and possibly other parameters used in the replacefiles function in search.php and 2 $file variable as used in the parse function in...
CVE-2006-0648
PHP iCalendar 2.0.1, 2.1, and 2.2 contain directory traversal/remote file inclusion vulnerabilities. The issues arise from input validation failures in search.php (getdate) and template.php (file) that allow an attacker to include arbitrary files and, if PHP register_globals is enabled, may enabl...
[eVuln] PHP iCalendar File Inclusion Vulnerability
New eVuln Advisory: PHP iCalendar File Inclusion Vulnerability http://evuln.com/vulns/70/summary.html --------------------Summary---------------- eVuln ID: EV0070 Software: PHP iCalendar Sowtware's Web Site: http://phpicalendar.net/ Versions: 2.0.1 2.1 2.2 Critical Level: Dangerous Type: File...
PHP iCalendar Multiple Script Remote File Inclusion
The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The installed version of PHP iCalendar fails to validate user input to the 'getdate' parameter of the 'search.php' script as well as the 'file' parameter of 'template.php' script. Provided...
CVE-2005-3366
PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting XSS issue as claimed by the original researcher...
PHP iCalendar Cross Site Scripting
PHP iCalendar CSS Name Cross-Site-Scripting Vulnerabilities in PHP iCalendar Systems Affected PHP iCalendar 2.0a2, 2.0b, 2.0c, 2.0.1 Severity Medium Risk Vendor http://www.phpicalendar.net Advisory http://www.ush.it/2005/10/25/php-icalendar-css/ Additional it...
PHP iCalendar index.php phpicalendar Parameter Remote File Inclusion
The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The version of PHP iCalendar installed on the remote host fails to sanitize the 'phpicalendar' cookie before using it in 'index.php' to include PHP code from a separate file. By leveraging...
[Full-disclosure] PHP iCalendar CSS
PHP iCalendar CSS Name Cross-Site-Scripting Vulnerabilities in PHP iCalendar Systems Affected PHP iCalendar 2.0a2, 2.0b, 2.0c, 2.0.1 Severity Medium Risk Vendor http://www.phpicalendar.net Advisory http://www.ush.it/2005/10/25/php-icalendar-css/ Additional it...