EUVD-2008-5040

Malware in sbrugna...

EUVD-2008-5041

Malware in sbrugna...

CVE-2008-5062

Directory traversal vulnerability in php/calpdf.php in Mini Web Calendar mwcal 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter...

Directory traversal

Directory traversal vulnerability in php/calpdf.php in Mini Web Calendar mwcal 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in php/caldefault.php in Mini Web Calendar mwcal 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-5061

Cross-site scripting XSS vulnerability in php/caldefault.php in Mini Web Calendar mwcal 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-5062

Directory traversal vulnerability in php/calpdf.php in Mini Web Calendar mwcal 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter...

CVE-2008-5061

CVE-2008-5061 is a Cross-site Scripting (XSS) vulnerability in Mini Web Calendar (mwcal) 1.2, specifically in php/cal_default.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, impacting only the client-side confidentiality/integrity depending on the context...

miniwebcalendar-disclosexss.txt

XSS / FD Vulnerability script:Mini Web Calendar, ver. 1.2 download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94 ...................................................................................... local file xpl:...