phpScheduleIt 1.2.12 Cross Site Scripting

Vulnerability ID: HTB22987 Reference: http://www.htbridge.ch/advisory/multiplexssinphpscheduleit.html Product: phpScheduleIt Vendor: php.brickhost.com Vulnerable Version: 1.2.12 Vendor Notification: 05 May 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Brid...

phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities

phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47951/info phpScheduleIt is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to...

phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47951/info phpScheduleIt is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

Cross-site Scripting (XSS) Vulnerabilities in phpScheduleIt

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpScheduleIt which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in phpScheduleIt 1.1 The vulnerability exists due to input sanitation errors in URL in th...

phpScheduleIt Detection

This host is running phpScheduleIt, an Open Source web-based reservation and scheduling system. OpenVAS Vulnerability Test $Id: phpScheduleItdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phpScheduleIt Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program ...

phpScheduleIt 'reserve.php' Remote Code Execution Vulnerability

phpScheduleIt is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user- supplied input. An attacker can leverage this issue to execute arbitrary PHP code on an affected computer with the privileges of the webserver process...

phpScheduleIt Detection

This host is running phpScheduleIt, an Open Source web-based reservation and scheduling system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

phpScheduleIt 'reserve.php' RCE Vulnerability

phpScheduleIt is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-0820

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via 1 the enddate parameter to reserve.php and 2 the startdate and enddate parameters to check.php. NOTE: the startdate/reserve.php vector is already covered by CVE-2008-6132...

Sql injection

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via 1 the enddate parameter to reserve.php and 2 the startdate and enddate parameters to check.php. NOTE: the startdate/reserve.php vector is already covered by CVE-2008-6132...

CVE-2009-0820

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via 1 the enddate parameter to reserve.php and 2 the startdate and enddate parameters to check.php. NOTE: the startdate/reserve.php vector is already covered by CVE-2008-6132...

CVE-2009-0820

CVE-2009-0820 affects phpScheduleIt prior to 1.2.11. It enables remote arbitrary PHP code execution via eval injection through reserve.php (end_date) and check.php (start_date/end_date); the start_date vector is also covered by CVE-2008-6132. OpenVAS/Exploit DB references confirm reserve.php RCE ...

phpScheduleIt多个PHP代码注入漏洞

BUGTRAQ ID: 33855 phpScheduleIt是一个基于Web的预约/计划系统，可以用来管理需要预约的资源。 phpScheduleIt的reserve.php和check.php文件中没有正确地验证对processreservation函数所传送的startdate和enddate参数，远程攻击者可以通过提交恶意请求导致注入并执行恶意PHP代码。 Nick Korbel phpScheduleIt 1.2.11 厂商补丁： Nick Korbel ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sql injection

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

CVE-2008-6132

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

CVE-2008-6132

phpScheduleIt 1.2.10 and earlier is affected by an eval injection in reserve.php's start_date parameter when magic_quotes_gpc is disabled, allowing remote code execution. The vulnerability is confirmed by multiple sources (NVD entry CVE-2008-6132; OpenVAS and CVE cross-references; Metasploit modu...

phpScheduleIt Detection

The remote host is running phpScheduleIt, an open source web-based reservation and scheduling application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34337; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...

phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit

No description provided by source. ?php / ------------------------------------------------------------------- phpScheduleIt = 1.2.10 reserve.php Remote Code Execution Exploit ------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== phpScheduleIt settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo;...

phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution

settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63. presentreservation$resinfo'resid'; 64. ... 79. function...