Webcalendar_project Webcalendar
10 CVEs affecting Webcalendar_project Webcalendar. Latest disclosed: 2024-01-25. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-1495 | Critical | 9.8 | 2020-01-27 | install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter. |
CVE-2012-1496 | High | 8.8 | 2020-01-27 | Local file inclusion in WebCalendar before 1.2.5. |
CVE-2024-22635 | Medium | 6.1 | 2024-01-25 | WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php. |
CVE-2017-10840 | Medium | 6.1 | 2017-08-29 | Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2023-0289 | Medium | 5.4 | 2023-01-13 | Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master. |
CVE-2013-1422 | Medium | 5.3 | 2020-02-04 | webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user"). |
CVE-2017-10841 | Medium | 4.9 | 2017-08-29 | Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors. |
CVE-2013-1421 | | 2014-04-22 | Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject ar… | |
CVE-2012-5385 | | 2012-10-11 | install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors rela… | |
CVE-2012-5384 | | 2012-10-11 | Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the (1) $nam… |