441 matches found
CVE-2024-22635
WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...
PT-2024-19511 · Unknown · Webcalendar
Name of the Vulnerable Software and Affected Versions: WebCalendar version 1.3.0 Description: A reflected cross-site scripting XSS issue was discovered in the /WebCalendarvqsmnseug2/edit entry.php component. This issue allows for the execution of malicious scripts on the client-side...
CVE-2024-22635
WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...
WebCalendar 1.3.0 Cross Site Scripting
Exploit Title: WebCalendar Version: 1.3.0 - Stored XSS - Reflected XSS Date: 2024-3-1 Exploit Author: tmrswrr Vendor Homepage: http://www.k5n.us/webcalendar.php Version: 1.3.0 Tested on: https://www.softaculous.com/apps/calendars/WebCalendar Stored XSS 1 Write Events Add New Events Brief...
WebCalendar 1.3.0 Cross Site Scripting Vulnerability
Exploit Title: WebCalendar Version: 1.3.0 - Stored XSS - Reflected XSS Exploit Author: tmrswrr Vendor Homepage: http://www.k5n.us/webcalendar.php Version: 1.3.0 Tested on: https://www.softaculous.com/apps/calendars/WebCalendar Stored XSS 1 Write Events Add New Events Brief Description :...
WebCalendar 1.3 Cross Site Request Forgery
==================================================================================================================================== | Title : WebCalendar v1.3 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendor :...
CVE-2023-0289
Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...
WebCalendar 跨站脚本漏洞
WebCalendar is a PHP application for maintaining calendars for individual users or groups of Intranet users. It can also be configured as an event calendar. WebCalendar suffers from a cross-site scripting vulnerability that originates from an attacker being able to implement stored cross-site...
PT-2023-16145 · Unknown · Webcalendar
Name of the Vulnerable Software and Affected Versions: webcalendar versions prior to master Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository craigk5n/webcalendar. Recommendations: For versions prior to master, update to the master version...
CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar
Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...
CVE-2023-0289
CVE-2023-0289 - Stored XSS in WebCalendar affects the GitHub project webcalendar; affected software is the WebCalendar application (versions prior to master). The vulnerability is a stored cross-site scripting issue in the location field when creating or viewing events, leading to script executio...
CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar
Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...
Stored XSS
Description webcalendar has a feature to add event and display the location of it. This feature lead to stored xss everytime a user open the calendar or the event detail page. Proof of Concept 1. 1- login as user 2. 2- create an event 3. 3- insert the payload on "location" field 4. 4- Save 5. 5- ...
Cross-Site Request Forgery (CSRF) in craigk5n/webcalendar
Description Cross-Site Request Forgery CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help of social engineering such as sending a link via email or chat, an attacker may trick the users of a web...
Cross-site Scripting (XSS) - Reflected in craigk5n/webcalendar
Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into websites. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execut...
Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar
Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into websites. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execut...
CVE-2013-1422
webcalendar before 1.2.7 shows the reason for a failed login e.g., "no such user"...
