380 matches found
CVE-2008-5968
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...
CVE-2008-5967
CVE-2008-5967 affects PHP iCalendar up to version 2.x. The issue is that admin/index.php does not require administrative authentication for an addupdate action, enabling remote attackers to upload a calendar (.ics) file with arbitrary content to the calendars/ directory outside the web root. This...
CVE-2008-5968: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...
CVE-2008-5967: Improper Authentication
admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...
PHP iCalendar Cookie处理绕过认证漏洞
BUGTRAQ ID: 31320 CVECAN ID: CVE-2008-5840 PHP iCalendar是基于PHP的iCal文件查看器/解析器，用于在浏览器中显示日历。 PHP iCalendar的index.php脚本中没有执行充分地安全限制，远程攻击者可以使用包含有URL编码.ICS文件的特制cookie（将phpicalendar和phpicalendarlogin设置为1）绕过认证限制上传恶意文件。 PHP iCalendar 2.24 厂商补丁： PHP iCalendar -------------...
CVE-2008-5840
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
Authentication flaw
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
CVE-2008-5840
CVE-2008-5840 affects PHP iCalendar 2.24 and earlier. The index.php script lacks sufficient access controls, allowing remote attackers to bypass authentication by setting cookies phpicalendar and phpicalendar_login to 1, enabling potentially malicious file uploads. Reported impact includes partia...
CVE-2008-5840
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
CVE-2008-5840: Undefined Security Weakness
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
PHP iCalendar < 2.25 Administrative Bypass
Binary data 4690.prm...
PHP iCalendar <= 2.24 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ============================================================ PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability ============================================================ + PHP iCalendar = 2.24 Insecure Cookie Handling...
PHP iCalendar <= 2.24 Insecure Cookie Handling Vulnerability
No description provided by source. + PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com 2008-09-22...
PHP iCalendar 2.24 - Insecure Cookie Handling
PHP iCalendar 2.24 - Insecure Cookie Handling + PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com...
phpical-cookie.txt
PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/";...
PHP iCalendar 2.24 - Insecure Cookie Handling
PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com 2008-09-22...
PHP iCalendar <= 2.24 (cookie_language) LFI / File Upload Exploit
Exploit for unknown platform in category web applications ================================================================= PHP iCalendar = 2.24 cookielanguage LFI / File Upload Exploit ================================================================= ?php /...
PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload
PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...
PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload
'.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. else 85. $addupdatemsg = $addupdatemsg . ''.$lang'lcalfile'.'...
GLSA-200806-06 : Evolution: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200806-06 Evolution: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research reported two vulnerabilities in Evolution: A boundary error exists when parsing overly long timezone strings contained within iCalendar...