EUVD-2006-5960

Malware in sbrugna...

EUVD-2006-2294

Malware in sbrugna...

MultiCalendars 3.0 All_calendars.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

CVE-2006-5977

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the 1 M or 2 Y parameter to rssout.asp, or the 3 cate parameter to allcalendars.asp. NOTE: the allcalendars.asp/calsids vector is already covered by CVE-2006-2293...

CVE-2006-5977

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the 1 M or 2 Y parameter to rssout.asp, or the 3 cate parameter to allcalendars.asp. NOTE: the allcalendars.asp/calsids vector is already covered by CVE-2006-2293...

CVE-2006-5977

CVE-2006-5977 describes multiple SQL injection vulnerabilities in MultiCalendars, allowing remote attackers to execute arbitrary SQL commands via (1) M or (2) Y in rss_out.asp, or (3) cate in all_calendars.asp. The vector all_calendars.asp/calsids is already covered by CVE-2006-2293. Affected pro...

MultiCalendars [ multiples injection sql ]

vendor site:http://www.expinion.net/ product:MultiCalendars bug:injection sql risk:medium injection sql get http://site.com/rssout.asp?ID=1&MODE=1&M='sql http://site.com/rssout.asp?ID=1&MODE=1&M=10&Y='sql http://site.com/allcalendars.asp?month=11&year=2006&cate='sql...

multicalendars.txt

vendor site:http://www.expinion.net/ product:MultiCalendars bug:injection sql risk:medium injection sql get http://site.com/rssout.asp?ID=1&MODE=1&M='sql http://site.com/rssout.asp?ID=1&MODE=1&M=10&Y='sql http://site.com/allcalendars.asp?month=11&year=2006&cate='sql...

Sql injection

SQL injection vulnerability in allcalendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2293

SQL injection vulnerability in allcalendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2293

CVE-2006-2293 affects MultiCalendars 3.0: SQL injection vulnerability in all_calendars.asp exploitable via the calsids parameter. Remote attackers can execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/NVD duplicate entries) with note that details origina...

CVE-2006-2293

SQL injection vulnerability in allcalendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

MultiCalendars 3.0 - All_calendars.asp SQL Injection

MultiCalendars 3.0 - Allcalendars.asp SQL Injection source: https://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

[SA20030] MultiCalendars "calsids" Parameter SQL Injection Vulnerability

TITLE: MultiCalendars "calsids" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA20030 VERIFY ADVISORY: http://secunia.com/advisories/20030/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MultiCalendars 3.x http://secunia.com/product/9842/...

MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection

source: https://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...