CVE-2012-5384

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

CVE-2012-5384: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

CVE-2007-6538

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6538: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

Moodle SQL Injection

Moodle.org PATH/moodle/ing/blocks/mrbs/code/web/viewentry.php?id=SQL&day=27&month=10&year=2007 And a POC: PATH/moodle/ing/blocks/mrbs/code/web/viewentry.php?id=200020UNION20SELECT20username,id,id,id,id,id,id,id,id,id,id,id20FROM20mdluser20WHERE20id=ID&day=27&month=10&year=2007...

CVE-2004-1506: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via 1 viewentry.php, 2 viewd.php, 3 usersel.php, 4 datesel.php, 5 trailer.php, or 6 styles.php, as demonstrated using img srg tags...

CVE-2004-1510: Undefined Security Weakness

WebCalendar allows remote attackers to gain privileges by modifying critical parameters to 1 viewentry.php or 2 upcoming.php...