Lucene search
+L

496 matches found

Prion
Prion
•added 2012/10/08 8:55 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...

4.3CVSS5.8AI score0.01693EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
•added 2012/10/08 8:00 p.m.•68 views

CVE-2012-0846

Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...

5.4AI score0.01693EPSS
SaveExploits1References9
CVE
CVE
•added 2012/10/08 8:00 p.m.•91 views

CVE-2012-0846

CVE-2012-0846 is an XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 that allows remote injection of arbitrary scripts/HTML via the Location variable. The connected records for CVE-2012-5384 describe additional XSS vectors affecting the same WebCalendar product (including parameters in edit_e...

4.3CVSS5.5AI score0.01693EPSS
SaveExploits1References9Affected Software1
Positive Technologies
Positive Technologies
•added 2012/10/08 12:00 a.m.•4 views

PT-2012-2902

Name of the Vulnerable Software and Affected Versions WebCalendar version 1.2.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Location variable. This can lead to the execution of malicious scripts on the client-side. Recommendation...

4.3CVSS0.01693EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/08 12:00 a.m.•5 views

CVE-2012-0846: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...

4.3CVSS6AI score0.01693EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•42 views

Fedora Update for WebCalendar FEDORA-2012-1898

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS6.5AI score0.01693EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•34 views

Fedora Update for WebCalendar FEDORA-2012-1898

Check for the Version of WebCalendar OpenVAS Vulnerability Test Fedora Update for WebCalendar FEDORA-2012-1898 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

4.3CVSS6.4AI score0.01693EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2012/05/31 12:00 a.m.•24 views

FreeBSD Ports: WebCalendar-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID 18dffa02-946a-11e1-be9d-000c29cc39d3 OpenVAS Vulnerability Test $ Description: Auto generated from VID 18dffa02-946a-11e1-be9d-000c29cc39d3 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

9.2AI score0.79764EPSS
SaveExploits15
OpenVAS
OpenVAS
•added 2012/05/31 12:00 a.m.•24 views

FreeBSD Ports: WebCalendar-devel

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

9.2AI score
SaveExploits0References4
Saint
Saint
•added 2012/05/18 12:00 a.m.•50 views

WebCalendar Pre-Auth PHP Code Execution

Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...

7.5CVSS9.8AI score0.79764EPSS
SaveExploits15
Saint
Saint
•added 2012/05/18 12:00 a.m.•41 views

WebCalendar Pre-Auth PHP Code Execution

Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...

9.8CVSS9.8AI score0.79764EPSS
SaveExploits15
Saint
Saint
•added 2012/05/18 12:00 a.m.•45 views

WebCalendar Pre-Auth PHP Code Execution

Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...

9.8AI score0.79764EPSS
SaveExploits15
Saint
Saint
•added 2012/05/18 12:00 a.m.•39 views

WebCalendar Pre-Auth PHP Code Execution

Added: 05/18/2012 CVE: CVE-2012-1495 BID: 53207 OSVDB: 80097 Background WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. Problem WebCalendar fails to properly...

9.8CVSS9.8AI score0.79764EPSS
SaveExploits15
Dsquare
Dsquare
•added 2012/05/10 12:00 a.m.•56 views

WebCalendar 1.2.4 RCE

Remote command execution vulnerability in WebCalendar install/index.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

7.5CVSS0.8AI score0.79764EPSS
SaveExploits15References3
Tenable Nessus
Tenable Nessus
•added 2012/05/03 12:00 a.m.•32 views

FreeBSD : WebCalendar -- multiple vulnerabilities (18dffa02-946a-11e1-be9d-000c29cc39d3)

Hanno Boeck reports : Fixes are now available for various security vulnerabilities including LFI local file inclusion, XSS cross site scripting and others. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...

9.8CVSS8.1AI score0.79764EPSS
SaveExploits15References6
Packet Storm
Packet Storm
•added 2012/04/30 12:00 a.m.•50 views

WebCalendar 1.2.4 Remote Code Execution

?php / ----------------------------------------------------------------------- WebCalendar = 1.2.4 install/index.php Remote Code Executionn Exploit ----------------------------------------------------------------------- author..........: Egidio Romano aka EgiX mail............:...

9.3AI score0.79764EPSS
SaveExploits15
Packet Storm
Packet Storm
•added 2012/04/30 12:00 a.m.•41 views

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebCalendar 1.2.4...

9.5AI score0.79764EPSS
SaveExploits15
zdt
zdt
•added 2012/04/29 12:00 a.m.•40 views

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

Exploit for linux platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7.1AI score0.79764EPSS
SaveExploits15
Exploit DB
Exploit DB
•added 2012/04/29 12:00 a.m.•79 views

WebCalendar 1.2.4 - Remote Code Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebCalendar 1.2.4...

9.8CVSS8.3AI score0.79764EPSS
SaveExploits15
FreeBSD
FreeBSD
•added 2012/04/28 12:00 a.m.•32 views

WebCalendar -- multiple vulnerabilities

Hanno Boeck reports: Fixes are now available for various security vulnerabilities including LFI local file inclusion, XSS cross site scripting and others...

9.8CVSS8.8AI score0.79764EPSS
SaveExploits15References3
Rows per page
Query Builder