CVE-2008-6132

phpScheduleIt 1.2.10 and earlier is affected by an eval injection in reserve.php's start_date parameter when magic_quotes_gpc is disabled, allowing remote code execution. The vulnerability is confirmed by multiple sources (NVD entry CVE-2008-6132; OpenVAS and CVE cross-references; Metasploit modu...

CVE-2004-1651

CVE-2004-1651 affects the phpScheduleIt 1.0.0 RC1 registration page. The vulnerabilities are cross-site scripting (XSS) via user-supplied input in (1) Name, (2) Lastname, and (3) Schedule Name fields during new user registration. The root cause is insufficient input sanitization, enabling remote ...

CVE-2004-2469

The CVE-2004-2469 entry concerns phpScheduleIt versions up to and including 1.0.1, where an unspecified issue in Reservation.class.php enables an attacker to modify or delete reservations. The vulnerability affects phpScheduleIt 1.01 and earlier and is documented across multiple sources (NVD/CVE....

CVE-2004-1652

The CVE affects phpScheduleIt 1.0.0 RC1. The vulnerability is that administrative privileges are not cleared when an administrator logs in as a normal user, enabling users with physical access to gain administrative privileges. The connected documents do not provide a patch, workaround, or explic...

CVE-2008-3268

Affected software: phpScheduleIt 1.2.0–1.2.9. vulnerability: when useLogonName is enabled, remote attackers with administrator email address knowledge can bypass restrictions and gain privileges via unspecified login-name related vectors. root cause/precise exploit details are not specified in th...