CVE-2007-3353

PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter. NOTE: a reliable third party disputes this issue, saying "the entire file is a class...

CVE-2007-3353

The CVE-2007-3353 vulnerability affects MyEvent 1.6, specifically in includes/template.php, where a remote file inclusion can occur via the myevent_path parameter to execute arbitrary PHP code. The root cause is an improper handling of the URL parameter, enabling code execution on the server. A t...

CVE-2007-3353: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter. NOTE: a reliable third party disputes this issue, saying "the entire file is a class...

PT-2007-4630 · Myevent · Myevent

Name of the Vulnerable Software and Affected Versions: MyEvent version 1.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the myevent path parameter in the includes/template.php file. A reliable third party disputes this issue, stating that the entire fi...

CVE-2007-0690

myEvent 1.6 allows remote attackers to obtain sensitive information via 1 a Log In action without a password to login.php, or an invalid 2 view or 3 monthno parameter to myevent.php, which reveals the path in various error messages...

CVE-2007-0690

CVE-2007-0690 affects myEvent version 1.6. Remote attackers can cause error messages from myevent.php and login.php to reveal server paths, enabling partial information disclosure. The issue arises when processing parameters view[], monthno[], or during a login action without a password, which tr...

CVE-2007-0690

myEvent 1.6 allows remote attackers to obtain sensitive information via 1 a Log In action without a password to login.php, or an invalid 2 view or 3 monthno parameter to myevent.php, which reveals the path in various error messages...

CVE-2007-0690: Undefined Security Weakness

myEvent 1.6 allows remote attackers to obtain sensitive information via 1 a Log In action without a password to login.php, or an invalid 2 view or 3 monthno parameter to myevent.php, which reveals the path in various error messages...

myEvent version 1.6 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...

myEvent Myevent.PHP远程文件包含漏洞

myEvent是一款基于PHP的事件管理程序。 myEvent不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'myevent.php'脚本对用户提交的"myeventpath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 myWebland myEvent 1.3 myWebland myEvent 1.2 http://mywebland.com/download.php?id=6...

myEvent14.txt

--------------------------------------------------------------------------------------- myEvent 1.4 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/08/11 HomePage : http://www.sh3ll.ir...

myEvent <= 1.4 Multiple Remote File Include Vulnerabilities

--------------------------------------------------------------------------------------- myEvent 1.4 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/08/11 HomePage : http://www.sh3ll.ir...

CVE-2006-4083

PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-4083

CVE-2006-4083 : A PHP remote file inclusion vulnerability in viewevent.php of the myWebland myEvent 1.x releases allows an attacker to execute arbitrary PHP code by supplying a URL in the myevent_path parameter. This is described as a different vector than CVE-2006-4040. Affected product: myWebla...

CVE-2006-4083: Undefined Security Weakness

PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-4040

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

EUVD-2006-4033

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

CVE-2006-4040

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

CVE-2006-4040

CVE-2006-4040 is a PHP remote file inclusion (RFI) vulnerability in myWebland myEvent prior to or at version 1.3, affecting myevent.php. An attacker can supply a URL via the myevent_path parameter to execute arbitrary PHP code on the server. The vulnerability is characterized by remote code execu...

CVE-2006-4040: Undefined Security Weakness

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...