webcalendar project webcalendar 1.2.0 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar prior to 1.2.5, 1.2.6, and other versions prior to 1.2.7 allows remote malicious users to inject arbitrary web script or HTML via the Category Name field to category.php.

Webcalendar Project Webcalendar 1.0 Webcalendar Project Webcalendar 1.1.1 Webcalendar Project Webcalendar 1.2.0 Webcalendar Project Webcalendar 1.2.2 Webcalendar Project Webcalendar 1.1.3 Webcalendar Project Webcalendar 1.1.4 Webcalendar Project Webcalendar 1.1.5 Webcalendar Project Webcalendar 1.1.6 Webcalendar Project Webcalendar 1.2 Webcalendar Project Webcalendar 1.2.6 Webcalendar Project Webcalendar Webcalendar Project Webcalendar 1.1.2 Webcalendar Project Webcalendar 1.2.1 Webcalendar Project Webcalendar 1.2.3

install/index.php in Craig Knudsen WebCalendar prior to 1.2.5 allows remote malicious users to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.

Webcalendar Project Webcalendar 1.2.2 Webcalendar Project Webcalendar 1.2.0 Webcalendar Project Webcalendar 1.1.1 Webcalendar Project Webcalendar 1.0 Webcalendar Project Webcalendar 1.2.4 Webcalendar Project Webcalendar 1.2.3 Webcalendar Project Webcalendar 1.1.6 Webcalendar Project Webcalendar 1.1.5 Webcalendar Project Webcalendar 1.1.4 Webcalendar Project Webcalendar 1.1.3 Webcalendar Project Webcalendar 1.2.1 Webcalendar Project Webcalendar 1.2 Webcalendar Project Webcalendar 1.1.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook