100 matches found
CVE-2008-5840
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
Authentication flaw
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
CVE-2008-5840
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...
CVE-2008-5840
CVE-2008-5840 affects PHP iCalendar 2.24 and earlier. The index.php script lacks sufficient access controls, allowing remote attackers to bypass authentication by setting cookies phpicalendar and phpicalendar_login to 1, enabling potentially malicious file uploads. Reported impact includes partia...
PHP iCalendar < 2.25 Administrative Bypass
Binary data 4690.prm...
PHP iCalendar 2.24 - Insecure Cookie Handling
PHP iCalendar 2.24 - Insecure Cookie Handling + PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com...
phpical-cookie.txt
PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/";...
PHP iCalendar <= 2.24 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ============================================================ PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability ============================================================ + PHP iCalendar = 2.24 Insecure Cookie Handling...
PHP iCalendar <= 2.24 Insecure Cookie Handling Vulnerability
No description provided by source. + PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com 2008-09-22...
PHP iCalendar 2.24 - Insecure Cookie Handling
PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com 2008-09-22...
PHP iCalendar <= 2.24 (cookie_language) LFI / File Upload Exploit
Exploit for unknown platform in category web applications ================================================================= PHP iCalendar = 2.24 cookielanguage LFI / File Upload Exploit ================================================================= ?php /...
PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload
'.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. else 85. $addupdatemsg = $addupdatemsg . ''.$lang'lcalfile'.'...
PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload
PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...
PHP iCalendar <= 2.24 - Cross-Site Scripting Vulnerability
PHP iCalendar = 2.24 - Cross-Site Scripting Vulnerability Download: http://phpicalendar.net/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by P...
phpical-xss.txt
PHP iCalendar alertdocument.cookie //---------------------------------------\ Greetz To: All Hackers Jose Luis Góngora Fernández / JosS!...
CVE-2006-6824
Multiple cross-site scripting XSS vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 getdate parameter in a day.php, b month.php, c year.php, d week.php, e search.php, f rss/index.php, g print.php, a...
CVE-2006-6824
Multiple cross-site scripting XSS vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 getdate parameter in a day.php, b month.php, c year.php, d week.php, e search.php, f rss/index.php, g print.php, a...
CVE-2006-6824
CVE-2006-6824 concerns multiple reflected XSS vulnerabilities in PHP iCalendar 2.23 rc1 and earlier. The affected software is PHP iCalendar, with the vulnerability exploitable via various parameters across several scripts: getdate (day.php, month.php, year.php, week.php, search.php, rss/index.php...
phpicalendar-xss.txt
PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...
PHP iCalendar 1.12.x - print.php Cross-Site Scripting
PHP iCalendar 1.12.x - print.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...