Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

webcalendar project webcalendar - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-1421
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar prior to 1.2.5, 1.2.6, and other versions prior to 1.2.7 allows remote malicious users to inject arbitrary web script or HTML via the Category Name field to category.php.
Webcalendar Project Webcalendar 1.0Webcalendar Project Webcalendar 1.1.1Webcalendar Project Webcalendar 1.2.0Webcalendar Project Webcalendar 1.2.2Webcalendar Project Webcalendar 1.1.3Webcalendar Project Webcalendar 1.1.4Webcalendar Project Webcalendar 1.1.5Webcalendar Project Webcalendar 1.1.6Webcalendar Project Webcalendar 1.2Webcalendar Project Webcalendar 1.2.6Webcalendar Project WebcalendarWebcalendar Project Webcalendar 1.1.2Webcalendar Project Webcalendar 1.2.1Webcalendar Project Webcalendar 1.2.3
NA
CVE-2012-5385
install/index.php in Craig Knudsen WebCalendar prior to 1.2.5 allows remote malicious users to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.
Webcalendar Project Webcalendar 1.2.2Webcalendar Project Webcalendar 1.2.0Webcalendar Project Webcalendar 1.1.1Webcalendar Project Webcalendar 1.0Webcalendar Project Webcalendar 1.2.4Webcalendar Project Webcalendar 1.2.3Webcalendar Project Webcalendar 1.1.6Webcalendar Project Webcalendar 1.1.5Webcalendar Project Webcalendar 1.1.4Webcalendar Project Webcalendar 1.1.3Webcalendar Project Webcalendar 1.2.1Webcalendar Project Webcalendar 1.2Webcalendar Project Webcalendar 1.1.2
5.4
CVSSv3
CVE-2023-0289
Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.
Webcalendar Project Webcalendar -
8.8
CVSSv3
CVE-2012-1496
Local file inclusion in WebCalendar prior to 1.2.5.
Webcalendar Project Webcalendar
9.8
CVSSv3
CVE-2012-1495
install/index.php in WebCalendar prior to 1.2.5 allows remote malicious users to execute arbitrary code via the form_single_user_login parameter.
Webcalendar Project Webcalendar
NA
CVE-2012-5384
Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote malicious users to inject arbitrary web script or HTML via the (1) $name or (2) $description variables in edit_entry_handler.php, or (3) $url, (4) $tempfullname, or (5) $ext_users[] vari...
Webcalendar Project Webcalendar -
5.3
CVSSv3
CVE-2013-1422
webcalendar prior to 1.2.7 shows the reason for a failed login (e.g., "no such user").
Webcalendar Project Webcalendar
6.1
CVSSv3
CVE-2017-10840
Cross-site scripting vulnerability in WebCalendar 1.2.7 and previous versions allows an malicious user to inject arbitrary web script or HTML via unspecified vectors.
Webcalendar Project Webcalendar 1.2.7
4.9
CVSSv3
CVE-2017-10841
Directory traversal vulnerability in WebCalendar 1.2.7 and previous versions allows authenticated malicious users to read arbitrary files via unspecified vectors.
Webcalendar Project Webcalendar 1.2.7
6.1
CVSSv3
CVE-2024-22635
WebCalendar v1.3.0 exists to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php.
Webcalendar Project Webcalendar 1.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761command injectionCVE-2024-3676IDORCVE-2024-30039CVE-2024-32113CVE-2024-30049CVE-2024-4776SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook