CVE-2009-1945

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-1945

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-1945

The CVE-2009-1945 entry documents a SQL injection vulnerability in WebCal 3.04, specifically in webCal3_detail.asp, exploitable via the event_id parameter. The underlying issue allows remote execution of arbitrary SQL commands. Affected software is WebCal 3.04; the vulnerability is confirmed in m...

CVE-2009-1945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

WebCal SQL Injection

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

WebCal - webCal3_detail.asp?event_id SQL Injection

WebCal - webCal3detail.asp?eventid SQL Injection 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 ...

WebCal (webCal3_detail.asp event_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ WebCal webCal3detail.asp eventid SQL Injection Vulnerability ================================================================...

WebCal - 'webCal3_detail.asp?event_id' SQL Injection

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

WebCal (webCal3_detail.asp event_id) SQL Injection Vulnerability

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

webcalXSS.txt

Author: Stan Bubrouski Date: December 16, 2005 Package: WebCal by Michael Arndt; http://bulldog.tzo.org/webcal/webcal.html Versions Affected: 1.11-3.04 unknown alertdocument.cookie&cal=public http://bulldog.tzo.org/perl/webcal.cgi?function=webyear&cal=public&year=alertdocument.cookie...

CVE-2005-4327

CVE-2005-4327 describes multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04. The issue allows remote attackers to inject arbitrary scripting/HTML via (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entrie...

CVE-2005-4327

Multiple cross-site scripting XSS vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the 1 function, 2 year, and 3 date parameters to webcal.cgi, 4 new calendar entries, and 5 notes for entries...

CVE-2005-4327: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the 1 function, 2 year, and 3 date parameters to webcal.cgi, 4 new calendar entries, and 5 notes for entries...

WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15917/info WebCal is prone to multiple HTML injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-suppli...

WebCal 3.0 4 - webcal.cgi Multiple Cross-Site Scripting Vulnerabilities

WebCal 3.0 4 - webcal.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15917/info WebCal is prone to multiple HTML injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...