[waraxe-2004-SA#015 - Multiple vulnerabilities in NukeCalendar v1.1.a]

================================================================================ waraxe-2004-SA015 ================================================================================ Multiple vulnerabilities in NukeCalendar v1.1.a...

waraxe-2004-SA015.txt

================================================================================ waraxe-2004-SA015 ================================================================================ Multiple vulnerabilities in NukeCalendar v1.1.a...

NukeCalendar 1.1.a - block-calendar.php Full Path Disclosure

NukeCalendar 1.1.a - block-calendar.php Full Path Disclosure source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting...

NukeCalendar 1.1.a - eid Cross-Site Scripting

NukeCalendar 1.1.a - eid Cross-Site Scripting source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible...

NukeCalendar 1.1.a - eid SQL Injection

NukeCalendar 1.1.a - eid SQL Injection source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences...

NukeCalendar 1.1.a - block-Calendar1.php Full Path Disclosure

NukeCalendar 1.1.a - block-Calendar1.php Full Path Disclosure source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting...

NukeCalendar 1.1.a - modules.php Full Path Disclosure

NukeCalendar 1.1.a - modules.php Full Path Disclosure source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possibl...

NukeCalendar 1.1.a - block-Calendar_center.php Full Path Disclosure

NukeCalendar 1.1.a - block-Calendarcenter.php Full Path Disclosure source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site...

NukeCalendar 1.1.a - 'eid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive...

NukeCalendar 1.1.a - 'eid' SQL Injection

source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive...

NukeCalendar 1.1.a - 'block-Calendar1.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive...

NukeCalendar 1.1.a - 'block-calendar.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive...

NukeCalendar 1.1.a - 'modules.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive...

NukeCalendar 1.1.a - 'block-Calendar_center.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive...