Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

webcalendar webcalendar 0.9.34 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2002-2065
WebCalendar 0.9.34 and previous versions with 'browsing in includes directory' enabled allows remote malicious users to read arbitrary include files with .inc extensions from the web root.
Webcalendar Webcalendar 0.9.31Webcalendar Webcalendar 0.9.32Webcalendar Webcalendar 0.9.34Webcalendar Webcalendar 0.9.33
4.3
CVSSv2
CVE-2004-1506
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote malicious users to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags.
Webcalendar Webcalendar 0.9.19Webcalendar Webcalendar 0.9.20Webcalendar Webcalendar 0.9.27Webcalendar Webcalendar 0.9.28Webcalendar Webcalendar 0.9.36Webcalendar Webcalendar 0.9.37Webcalendar Webcalendar 0.9.44Webcalendar Webcalendar 0.9.8Webcalendar Webcalendar 0.9.21Webcalendar Webcalendar 0.9.22Webcalendar Webcalendar 0.9.29Webcalendar Webcalendar 0.9.30Webcalendar Webcalendar 0.9.38Webcalendar Webcalendar 0.9.39Webcalendar Webcalendar 0.9.11Webcalendar Webcalendar 0.9.23Webcalendar Webcalendar 0.9.24Webcalendar Webcalendar 0.9.31Webcalendar Webcalendar 0.9.32Webcalendar Webcalendar 0.9.33Webcalendar Webcalendar 0.9.40Webcalendar Webcalendar 0.9.41
7.5
CVSSv2
CVE-2004-1508
init.php in WebCalendar allows remote malicious users to execute arbitrary local PHP scripts via the user_inc parameter.
Webcalendar Webcalendar 0.9.11Webcalendar Webcalendar 0.9.15Webcalendar Webcalendar 0.9.16Webcalendar Webcalendar 0.9.19Webcalendar Webcalendar 0.9.26Webcalendar Webcalendar 0.9.27Webcalendar Webcalendar 0.9.34Webcalendar Webcalendar 0.9.35Webcalendar Webcalendar 0.9.43Webcalendar Webcalendar 0.9.44Webcalendar Webcalendar 0.9.24Webcalendar Webcalendar 0.9.25Webcalendar Webcalendar 0.9.32Webcalendar Webcalendar 0.9.33Webcalendar Webcalendar 0.9.40Webcalendar Webcalendar 0.9.41Webcalendar Webcalendar 0.9.42Webcalendar Webcalendar 0.9.20Webcalendar Webcalendar 0.9.21Webcalendar Webcalendar 0.9.28Webcalendar Webcalendar 0.9.29Webcalendar Webcalendar 0.9.36
5
CVSSv2
CVE-2004-1507
CRLF injection vulnerability in login.php in WebCalendar allows remote malicious users to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.
Webcalendar Webcalendar 0.9.21Webcalendar Webcalendar 0.9.22Webcalendar Webcalendar 0.9.30Webcalendar Webcalendar 0.9.31Webcalendar Webcalendar 0.9.38Webcalendar Webcalendar 0.9.39Webcalendar Webcalendar 0.9.11Webcalendar Webcalendar 0.9.23Webcalendar Webcalendar 0.9.24Webcalendar Webcalendar 0.9.25Webcalendar Webcalendar 0.9.32Webcalendar Webcalendar 0.9.33Webcalendar Webcalendar 0.9.40Webcalendar Webcalendar 0.9.41Webcalendar Webcalendar 0.9.15Webcalendar Webcalendar 0.9.16Webcalendar Webcalendar 0.9.26Webcalendar Webcalendar 0.9.27Webcalendar Webcalendar 0.9.34Webcalendar Webcalendar 0.9.35Webcalendar Webcalendar 0.9.42Webcalendar Webcalendar 0.9.43
7.5
CVSSv2
CVE-2005-2320
WebCalendar prior to 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote malicious users to gain privileges.
Webcalendar Webcalendar 0.9.26Webcalendar Webcalendar 0.9.27Webcalendar Webcalendar 0.9.28Webcalendar Webcalendar 0.9.29Webcalendar Webcalendar 0.9.42Webcalendar Webcalendar 0.9.43Webcalendar Webcalendar 0.9.44Webcalendar Webcalendar 0.9.45Webcalendar Webcalendar 0.9.50Webcalendar Webcalendar 0.9.15Webcalendar Webcalendar 0.9.16Webcalendar Webcalendar 0.9.19Webcalendar Webcalendar 0.9.20Webcalendar Webcalendar 0.9.34Webcalendar Webcalendar 0.9.35Webcalendar Webcalendar 0.9.36Webcalendar Webcalendar 0.9.37Webcalendar Webcalendar 0.9.22Webcalendar Webcalendar 0.9.24Webcalendar Webcalendar 0.9.31Webcalendar Webcalendar 0.9.33Webcalendar Webcalendar 0.9.38
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middlecommand injectionCVE-2021-47511CVE-2024-26238CVE-2024-4858CVE-2024-21305XXECVE-2021-47555CVE-2021-47526
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook