WebCalendar Detection

#
# (C) Tenable Network Security, Inc.
#



include("compat.inc");

if (description) {
  script_id(18572);
  script_version("1.12");
  script_set_attribute(attribute:"plugin_modification_date", value:"2022/06/01");

  script_name(english:"WebCalendar Detection");

  script_set_attribute(attribute:"synopsis", value:
"The remote web server contains a web-based calendar application
written in PHP.");
  script_set_attribute(attribute:"description", value:
"This script detects whether the remote host is running WebCalendar and
extracts version numbers and locations of any instances found. 

WebCalendar is an open source web calendar application written in PHP.");
  script_set_attribute(attribute:"see_also", value:"http://www.k5n.us/webcalendar.php");
  script_set_attribute(attribute:"solution", value:
"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2005/06/28");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"asset_inventory", value:"True");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:k5n:webcalendar");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2005-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("http_version.nasl");
  script_require_keys("www/PHP");
  script_exclude_keys("Settings/disable_cgi_scanning");
  script_require_ports("Services/www", 80);

  exit(0);
}


include("global_settings.inc");
include("misc_func.inc");
include("http.inc");


port = get_http_port(default:80);
if (!can_host_php(port:port)) exit(0);


# Search for WebCalendar.
installs = 0;
foreach dir (cgi_dirs()) {
  # Grab month.php.
  r = http_send_recv3(method:"GET", item:string(dir, "/month.php"), port:port);
  if (isnull(r)) exit(0);
  res = r[2];

  # If it looks like WebCalendar...
  #
  # nb: not all sites have a banner so we have to look for 
  #     common elements instead.
  if (
    '<a class="dayofmonth" href="day.php?date=' >< res && 
    '<FORM ACTION="month.php" METHOD="GET" NAME="SelectMonth">' >< res
  ) {
    # Try to identify the version number from the banner, if present.
    pat = '<a title="WebCalendar v(.+) \\(.+\\)" id="programname" ';
    matches = egrep(pattern:pat, string:res);
    foreach match (split(matches)) {
      match = chomp(match);
      ver = eregmatch(pattern:pat, string:match);
      if (!isnull(ver)) {
        ver = ver[1];
        break;
      }
    }

    # If that didn't work, try getting it from the changelog.
    if (isnull(ver)) {
      r = http_send_recv3(method:"GET", item:string(dir, "/ChangeLog"), port:port);
      if (isnull(r)) exit(0);
      res = r[2];

      pat = "^Version (.+) \\(";
      matches = egrep(pattern:pat, string:res);
      foreach match (split(matches)) {
        match = chomp(match);
        ver = eregmatch(pattern:pat, string:match);
        if (!isnull(ver)) {
          ver = ver[1];
          break;
        }
      }
    }

    # Oh well, just mark it as "unknown".
    if (isnull(ver)) ver = "unknown";

    if (dir == "") dir = "/";
    set_kb_item(
      name:string("www/", port, "/webcalendar"),
      value:string(ver, " under ", dir)
    );
    set_kb_item(name:"www/webcalendar", value:TRUE);
    installations[dir] = ver;
    ++installs;

    # Scan for multiple installations only if the "Perform thorough tests" setting is checked.
    if (!thorough_tests) break;
  }
}


# Report any instances found unless Report verbosity is "Quiet".
if (installs && report_verbosity > 0) {
  if (installs == 1) {
    foreach dir (keys(installations)) {
      # empty - just need to set 'dir'.
    }
    if (ver == "unknown") {
      info = string("An unknown version of WebCalendar was detected on the remote\nhost under the path ", dir, ".");
    }
    else {
      info = string("WebCalendar ", ver, " was detected on the remote host under\nthe path ", dir, ".");
    }
  }
  else {
    info = string(
      "Multiple instances of WebCalendar were detected on the remote host:\n",
      "\n"
    );
    foreach dir (keys(installations)) {
      info = info + string("    ", installations[dir], ", installed under ", dir, "\n");
    }
    info = chomp(info);
  }

  security_note(port:port, extra: info);
}