49 matches found
CVE-2023-28492: Missing Authorization
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...
WordPress CP Multi View Event Calendar Plugin <= 1.4.13 is vulnerable to Broken Access Control
Software CP Multi View Event Calendar Type Plugin Vulnerable versions = 1.4.13 Fixed in 1.4.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23814 Patch priority Low CVSS severity Low 3.8 Developer Claim ownership PSID cf4c806e3e64 Credits yuyudhn Requir...
CVE-2020-28070
SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in viewevent.php via the 'id' parameter...
CVE-2018-6583
SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request...
CVE-2018-6583: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request...
PT-2018-17647
Name of the Vulnerable Software and Affected Versions Joomla! Timetable Responsive Schedule version 1.5 Description A SQL Injection issue exists in the Timetable Responsive Schedule component for Joomla!, which can be exploited via a view=event&alias= request. Recommendations For version 1.5,...
Joomla! Component JUX EventOn 1.0.1 - id SQL Injection
Joomla! Component JUX EventOn 1.0.1 - id SQL Injection Exploit Title: Joomla! Component JUX EventOn v1.0.1 - SQL Injection Google Dork: inurl:index.php?option=comjuxeventon Date: 04.03.2017 Vendor Homepage: http://joomlaux.com/ Software Buy:...
WordPress Plugin CP Multi View Event Calendar 1.1.7 - SQL Injection
Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage:...
CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...
WordPress CP Multi View Event Calendar Plugin <= 1.1.4 - SQL Injection
CP Multi View Event Calendar plugin is prone to an SQL injection vulnerability in "id" and "viewid" parameters. Also, there is a cross-site scripting vulnerability in "weekstartday" parameter. Solution Update the plugin...
Wordpress CP Multi View Event Calendar 1.01 - SQL Injection
No description provided by source. Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 /...
CVE-2014-8586
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
Sql injection
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
CVE-2014-8586
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
CVE-2014-8586
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
CVE-2014-8586
CVE-2014-8586 affects the CP Multi View Event Calendar plugin for WordPress (version 1.01) and is due to a SQL injection in the calid parameter, enabling remote arbitrary SQL execution. The connected sources provide concrete details: the vulnerability vector is web/HTTP via calid, with the underl...
CVE-2014-8586: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
WordPress Multi View Event Calendar SQL Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
WordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection
WordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows...
WordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection
Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 / sqlmap 0.8-1 Linux / Mozilla Firef...