429 matches found
CVE-2006-0252: Undefined Security Weakness
SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the 1 year, 2 month, and 3 day parameters...
CVE-2006-0234: Undefined Security Weakness
SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-1148
calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid 1 year or 2 month parameters, which leaks the full pathname and debug information...
CVE-2005-0293: Undefined Security Weakness
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. dot dot in the month parameter...
CVE-2005-0294: Undefined Security Weakness
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service infinite loop via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter...
CVE-2003-0416: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via 1 the year parameter in a showmonth action, 2 the month parameter in a showmonth action, or 3 the host parameter in a showhost action...