EUVD-2008-5708

Malware in sbrugna...

EUVD-2008-5707

Malware in sbrugna...

CVE-2008-5737

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...

Authentication flaw

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 can be exploited by remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. This is the explicit vulnerability described in the CVE-2008-5738 records (NVD) with a high impact score; no remediation ...

CVE-2008-5738

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...

CVE-2008-5737

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5737

CVE-2008-5737 is a SQL injection vulnerability affecting Nodstrum MySQL Calendar (versions 1.1 and 1.2). The flaw occurs in index.php where the username parameter can be manipulated to execute arbitrary SQL commands, enabling an attacker to access or modify data. The CVSSv2 base score is 7.5 (Hig...

CVE-2008-5737: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5738: Undefined Security Weakness

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information...