CVE-2010-0636

Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the 1 tab parameter to users.php and the PATHINFO to 2 day.php, 3 month.php, and 4 week.php. NOTE: some of these details are...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the 1 tab parameter to users.php and the PATHINFO to 2 day.php, 3 month.php, and 4 week.php. NOTE: some of these details are...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that 1 delete an event or 2 ban an IP address from posting via unknown vectors. NOTE: some of these...

CVE-2010-0636

Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the 1 tab parameter to users.php and the PATHINFO to 2 day.php, 3 month.php, and 4 week.php. NOTE: some of these details are...

CVE-2010-0637

Multiple cross-site request forgery CSRF vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that 1 delete an event or 2 ban an IP address from posting via unknown vectors. NOTE: some of these...

CVE-2010-0636

Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the 1 tab parameter to users.php and the PATHINFO to 2 day.php, 3 month.php, and 4 week.php. NOTE: some of these details are...

CVE-2010-0636

WebCalendar 1.2.0 and all versions before 1.2.5 are vulnerable to multiple XSS flaws. An attacker can inject arbitrary script via the tab parameter to users.php and via PATH_INFO to day.php, month.php, and week.php. The issue stems from insufficient input sanitization. Upgrading to 1.2.5 or later...

CVE-2010-0637

WebCalendar 1.2.0 and earlier (up to 1.2.5) are vulnerable to multiple CSRF flaws that can hijack administrator sessions to perform actions such as deleting events or banning IPs. The issue affects the product as described in CVE-2010-0637 with a CVSS base score of 6.8 (network, medium complexity...

Unfixed XSS vulnerability at www.k5n.us

Security researcher Dark.Man, has submitted on 28/08/2009 a cross-site-scripting XSS vulnerability affecting www.k5n.us, which at the time of submission ranked 142284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

WebCalendar Detection

This host is running WebCalendar, a PHP-based calendar application. OpenVAS Vulnerability Test $Id: webcalendardetect.nasl 5744 2017-03-28 07:25:23Z cfi $ WebCalendar Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can...

WebCalendar Detection (HTTP)

HTTP based detection of WebCalendar. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100184";...

WebCalendar User Account Enumeration Disclosure Issue

The remote web server is affected by an information disclosure issue. Description: The version of WebCalendar on the remote host is prone to a user account enumeration weakness in that in response to login attempts it returns different error messages depending on whether the user exists or the...

WebCalendar < 1.0.4 User Account Enumeration Disclosure Vulnerability - Active Check

The version of WebCalendar on the remote host is prone to a user account enumeration weakness in that in response to login attempts it returns different error messages depending on whether the user exists or the password is invalid. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptio...

FreeBSD Ports: WebCalendar

The remote host is missing an update to the system as announced in the referenced advisory. VID 07ead557-a220-11da-b410-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: WebCalendar

The remote host is missing an update to the system as announced in the referenced advisory. VID 72999d57-d6f6-11db-961b-005056847b26 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: WebCalendar

The remote host is missing an update to the system as announced in the referenced advisory. VID 09c92f3a-fd49-11da-995c-605724cdf281 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: webcalendar

The remote host is missing an update to the system as announced in the referenced advisory. VID 60f8fe7b-3cfb-11da-baa2-0004614cc33d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: WebCalendar

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: WebCalendar

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: WebCalendar

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...