27 matches found
EUVD-2008-3021
Malware in sbrugna...
EUVD-2013-3893
Malware in sbrugna...
EUVD-2012-2904
Malware in sbrugna...
EUVD-2012-1987
Malware in sbrugna...
Simple PHP Agenda Request Forgery Vulnerability
Simple PHP Agenda is a PHP, MYSQL based meeting schedule management tool. A request forgery vulnerability exists in Simple PHP Agenda auth/process.php, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the...
CVE-2012-1978
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
CVE-2012-1978
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
CVE-2012-1978: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...
PT-2015-3521
Name of the Vulnerable Software and Affected Versions Simple PHP Agenda versions 2.2.8 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through requests to several API endpoints, including...
CVE-2013-3961
SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...
Sql injection
SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...
CVE-2013-3961
SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...
CVE-2013-3961
CVE-2013-3961 affects Simple PHP Agenda up to version 2.2.8, where an authenticated user can exploit an SQL injection in edit_event.php via the eventid parameter. The root cause is inadequate input sanitization (relying on mysql_real_escape_string) allowing arbitrary SQL execution and potential d...
PT-2014-2718
Name of the Vulnerable Software and Affected Versions Simple PHP Agenda versions prior to 2.2.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the eventid parameter in the "edit event.php" file. Recommendations For versions prior to...
CVE-2013-3961: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...
CVE-2012-2925
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action...
Sql injection
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action...
CVE-2012-2925
The CVE-2012-2925 entry concerns a SQL injection in engine.php of Simple PHP Agenda 2.2.8, exploitable via the priority parameter in addTodo. The root cause is unsanitized/concatenated input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Affected software: Simpl...