CVE-2005-1397

SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-1397

PHP-Calendar is affected by a SQL injection in includes/search.php prior to version 0.10.3. The vulnerability allows remote attackers to manipulate SQL queries via unsanitized input in search-related parameters (vectors not explicitly disclosed). Impact per sources: potential exposure of data and...

CVE-2005-1397

SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

PHP-Calendar includes/search.php Multiple Parameter SQL Injection

The remote web server is running PHP-Calendar, a web-based calendar written in PHP. The version of PHP-Calendar installed on the remote host suffers from a SQL injection vulnerability due to its failure to sanitize input to the 'sort' and 'order' parameters to the 'includes/search.php' script. An...

PHP-Calendar < 0.10.3 includes/search.php SQL Injection

Binary data 2864.prm...

CVE-2004-1423

PHP-Calendar (Sean Proctor) before 0.10.1 contains multiple remote file inclusion flaws. The vulnerability is triggered by a URL in the phpc_root_path parameter to includes/calendar.php or includes/setup.php, allowing remote attackers to execute arbitrary PHP code. Affected product: PHP-Calendar;...

phpcalendar.txt

GulfTech Security Research December 28th, 2004 Vendor : Sean Proctor URL : http://php-calendar.sourceforge.net/ Version : All Versions Risk : File Include Vulnerability Description: I was searching for a decent calendar which my group at school could use to keep track of events, etc. We were...

CVE-2004-1423

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office VLO and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpcrootpath parameter to 1 includes/calendar.ph...

php-Calendar File Include Vulnerability [ Command Exec ]

GulfTech Security Research December 28th, 2004 Vendor : Sean Proctor URL : http://php-calendar.sourceforge.net/ Version : All Versions Risk : File Include Vulnerability Description: I was searching for a decent calendar which my group at school could use to keep track of events, etc. We were...

PHP-Calendar Multiple Script phpc_root_path Parameter Remote File Inclusion

The remote web server is running PHP-Calendar, a web-based calendar written in PHP. The remote version of this software is vulnerable to a file inclusion flaw that could allow an attacker to execute arbitrary PHP commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...