EUVD-2017-2312

Malware in sbrugna...

PHP Event Calendar Lite Edition SQL Injection Vulnerability

Product: PHP Event Calendar Manufacturer: Kayson Group Ltd. Affected Versions: PHP Event Calendar Lite edition Tested Versions: PHP Event Calendar Lite edition Vulnerability Type: SQL injection CWE-89 Risk Level: High Solution Status: Closed Manufacturer Notification: 2021-08-09 Solution Date:...

PHP Event Calendar Lite Edition Cross Site Scripting Vulnerability

Product: PHP Event Calendar Manufacturer: Kayson Group Ltd. Affected Versions: PHP Event Calendar Lite edition Tested Versions: PHP Event Calendar Lite edition Vulnerability Type: Cross-site Scripting CWE-79 Risk Level: High Solution Status: Open Manufacturer Notification: 2021-08-09 Public...

PHP Event Calendar Lite Edition Cross Site Scripting

Advisory ID: SYSS-2021-049 Product: PHP Event Calendar Manufacturer: Kayson Group Ltd. Affected Versions: PHP Event Calendar Lite edition Tested Versions: PHP Event Calendar Lite edition Vulnerability Type: Cross-site Scripting CWE-79 Risk Level: High Solution Status: Open Manufacturer...

Kayson Group phpGrid Directory Traversal Vulnerability

Kayson Group phpGrid is a suite of development tools for rapid development of MIS systems from Kayson Group. A directory traversal vulnerability exists in Kayson Group phpGrid versions prior to 7.2.5. A remote attacker can exploit this vulnerability by uploading a specially crafted file with a...

Directory traversal

Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. dot dot in the file name...

CVE-2017-10665

The CVE affects Kayson Group phpGrid prior to version 7.2.5, where a directory traversal flaw in ajaxfileupload.php allows a remote attacker to upload a crafted file whose name contains .. to execute arbitrary code. This is a server-side path traversal issue in the file upload handling, enabling ...

CVE-2017-10665

Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. dot dot in the file name...