EUVD-2006-5960

Malware in sbrugna...

EUVD-2006-2294

Malware in sbrugna...

MultiCalendars 3.0 All_calendars.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

CVE-2006-5977

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the 1 M or 2 Y parameter to rssout.asp, or the 3 cate parameter to allcalendars.asp. NOTE: the allcalendars.asp/calsids vector is already covered by CVE-2006-2293...

CVE-2006-5977

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the 1 M or 2 Y parameter to rssout.asp, or the 3 cate parameter to allcalendars.asp. NOTE: the allcalendars.asp/calsids vector is already covered by CVE-2006-2293...

CVE-2006-5977

CVE-2006-5977 describes multiple SQL injection vulnerabilities in MultiCalendars, allowing remote attackers to execute arbitrary SQL commands via (1) M or (2) Y in rss_out.asp, or (3) cate in all_calendars.asp. The vector all_calendars.asp/calsids is already covered by CVE-2006-2293. Affected pro...

MultiCalendars [ multiples injection sql ]

vendor site:http://www.expinion.net/ product:MultiCalendars bug:injection sql risk:medium injection sql get http://site.com/rssout.asp?ID=1&MODE=1&M='sql http://site.com/rssout.asp?ID=1&MODE=1&M=10&Y='sql http://site.com/allcalendars.asp?month=11&year=2006&cate='sql...

multicalendars.txt

vendor site:http://www.expinion.net/ product:MultiCalendars bug:injection sql risk:medium injection sql get http://site.com/rssout.asp?ID=1&MODE=1&M='sql http://site.com/rssout.asp?ID=1&MODE=1&M=10&Y='sql http://site.com/allcalendars.asp?month=11&year=2006&cate='sql...

CVE-2006-2293

SQL injection vulnerability in allcalendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Sql injection

SQL injection vulnerability in allcalendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2293

CVE-2006-2293 affects MultiCalendars 3.0: SQL injection vulnerability in all_calendars.asp exploitable via the calsids parameter. Remote attackers can execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/NVD duplicate entries) with note that details origina...

CVE-2006-2293

SQL injection vulnerability in allcalendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

[SA20030] MultiCalendars "calsids" Parameter SQL Injection Vulnerability

TITLE: MultiCalendars "calsids" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA20030 VERIFY ADVISORY: http://secunia.com/advisories/20030/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MultiCalendars 3.x http://secunia.com/product/9842/...

MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection

source: https://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

MultiCalendars 3.0 - All_calendars.asp SQL Injection

MultiCalendars 3.0 - Allcalendars.asp SQL Injection source: https://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...