EUVD-2013-5785

Malware in sbrugna...

CVE-2013-5953

Multiple cross-site scripting XSS vulnerabilities in tmpl/layouteditevent.php in the Multi Calendar commulticalendar component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 calid or 2 paletteDefault parameter in an...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in tmpl/layouteditevent.php in the Multi Calendar commulticalendar component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 calid or 2 paletteDefault parameter in an...

CVE-2013-5953

Multiple cross-site scripting XSS vulnerabilities in tmpl/layouteditevent.php in the Multi Calendar commulticalendar component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 calid or 2 paletteDefault parameter in an...

CVE-2013-5953

CVE-2013-5953 affects the Joomla! Multi Calendar component (com_multicalendar) 4.0.2 and possibly earlier versions (e.g., 4.8.5), with multiple XSS vulnerabilities in tmpl/layout_editevent.php. The root cause is inadequate sanitization of GET parameters calid and paletteDefault when task editeven...

Joomla! Multi Calendar组件跨站脚本漏洞

CVE ID：CVE-2013-5953 Joomla!是一款内容管理系统。 由于通过"calid"和"paletteDefault" GET参数传递到index.php 当"option"设置为"commulticalendar"和"task"设置为"editevent"的输入在返回用户前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 Multi Calendar 4.x component for Joomla 目前没有详细解决方案提供： http://www.joomla.org...

Joomla Component Multi Calendar Multiple XSS Vulnerabilities

Joomla component Multi Calendar is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla Multi Calendar 4.0.2 Cross Site Scripting

Hello, Multiple cross-site scripting XSS vulnerabilities in Multi calendar 4.0.2 component for Joomla! allow remote attackers to inject arbitrary web script or HTML code via 1 the calid parameter to index.php or 2 the paletteDefault parameter to index.php. File: /tmpl/layouteditevent.php Lines: 1...