phpscheduleit-exec.txt

settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63. presentreservation$resinfo'resid'; 64. ... 79. function...

phpScheduleIt 1.2.10 - reserve.php Remote Code Execution

phpScheduleIt 1.2.10 - reserve.php Remote Code Execution settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63...

CVE-2008-3268

Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from...

Design/Logic Flaw

Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from...

CVE-2008-3268

Affected software: phpScheduleIt 1.2.0–1.2.9. vulnerability: when useLogonName is enabled, remote attackers with administrator email address knowledge can bypass restrictions and gain privileges via unspecified login-name related vectors. root cause/precise exploit details are not specified in th...

CVE-2008-3268

Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from...

CVE-2004-2469

The CVE-2004-2469 entry concerns phpScheduleIt versions up to and including 1.0.1, where an unspecified issue in Reservation.class.php enables an attacker to modify or delete reservations. The vulnerability affects phpScheduleIt 1.01 and earlier and is documented across multiple sources (NVD/CVE....

CVE-2004-2469

Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations...

CVE-2004-1651

CVE-2004-1651 affects the phpScheduleIt 1.0.0 RC1 registration page. The vulnerabilities are cross-site scripting (XSS) via user-supplied input in (1) Name, (2) Lastname, and (3) Schedule Name fields during new user registration. The root cause is insufficient input sanitization, enabling remote ...

CVE-2004-1652

phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges...

CVE-2004-1651

Multiple cross-site scripting XSS vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Lastname fields during new user registration, or 3 the Schedule Name field...

CVE-2004-1652

The CVE affects phpScheduleIt 1.0.0 RC1. The vulnerability is that administrative privileges are not cleared when an administrator logs in as a normal user, enabling users with physical access to gain administrative privileges. The connected documents do not provide a patch, workaround, or explic...

CVE-2004-2469

Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations...

phpScheduleIt < 1.0.1 Reservation.class.php Arbitrary Reservation Modification

Binary data 2410.prm...

[SA13206] phpScheduleIt Reservation Manipulation Vulnerability

TITLE: phpScheduleIt Reservation Manipulation Vulnerability SECUNIA ADVISORY ID: SA13206 VERIFY ADVISORY: http://secunia.com/advisories/13206/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: phpScheduleIt 1.x http://secunia.com/product/4260/ DESCRIPTION: A vulnerabili...

Multiple Vulnerabilities in phpScheduleIt

--------------------------------------------------------------------------- Multiple Vulnerabilities in phpScheduleIt --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...

phpScheduleIt < 1.0.0 New User Registration HTML Injection

Binary data 2191.prm...

phpScheduleIt 1.0.0 RC1 Multiple XSS

According to its banner, the version of phpScheduleIt on the remote host is earlier than 1.0.0. Such versions are vulnerable to HTML injection issues. For example, an attacker may add malicious HTML and JavaScript code in a schedule page if he has the right to edit the 'Schedule Name' field. This...

CVE-2004-1652

phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges...

CVE-2004-1651

Multiple cross-site scripting XSS vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Lastname fields during new user registration, or 3 the Schedule Name field...