Information disclosure

WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ws/usermod.php and certain other files...

CVE-2011-3814: Exposure of Sensitive Information to an Unauthorized Actor

WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ws/usermod.php and certain other files...

CVE-2011-3814

WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ws/usermod.php and certain other files...

PT-2011-4704

Name of the Vulnerable Software and Affected Versions WebCalendar versions 1.2.3 through 1.2.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as ws/user mod.php, which reveals th...

CVE-2011-3814

WebCalendar 1.2.3 (and earlier up to 1.2.4/1.2.5 line) is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting certain PHP files, exposing the installation path in error messages (notably ws/user_mod.php). Affected version ran...

CVE-2011-3695

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.php and certain other files...

Information disclosure

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.php and certain other files...

CVE-2011-3695

CVE-2011-3695 affects 111WebCalendar 1.2.3, where an attacker can disclose installation path information by directly requesting a PHP file, causing an error message (as shown by footer.php and related files). The root cause is improper disclosure through error output when accessing certain PHP fi...

CVE-2011-3695

111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by footer.php and certain other files...

WebCalendar CVS v1.2 Multiple (CSRF/XSRF) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WebCalendar CVS 1.2 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

WebCalendar Multiple Cross Site Scripting Vulnerabilities

This host is running WebCalendar and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbwebcalendarmultxssvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ WebCalendar Multiple Cross Site Scripting Vulnerabilities Authors: Shashi Kiran N Copyright: Copyright c...

WebCalendar < 1.2.4 Multiple XSS Vulnerabilities

WebCalendar is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Cross-Site Scripting vulnerabilities in WebCalendar

Advisory: Multiple Cross-Site Scripting vulnerabilities in WebCalendar Advisory ID: SSCHADV2011-008 Author: Stefan Schurtz Affected Software: Version 1.2.3 and probably prior versions Vendor URL: http://www.k5n.us/webcalendar.php Vendor Status: informed CVE-ID: - ==========================...

WebCalendar 1.2.3 Cross Site Scripting

Advisory: Multiple Cross-Site Scripting vulnerabilities in WebCalendar Advisory ID: SSCHADV2011-008 Author: Stefan Schurtz Affected Software: Version 1.2.3 and probably prior versions Vendor URL: http://www.k5n.us/webcalendar.php Vendor Status: informed CVE-ID: - ==========================...

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/48546/info WebCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

HTB22930: Multiple XSS in WebCalendar

Vulnerability ID: HTB22930 Reference: http://www.htbridge.ch/advisory/xssinwebcalendar.html Product: WebCalendar Vendor: k5n.us http://www.k5n.us/ Vulnerable Version: 1.2.3 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Bridge ...

WebCalendar 1.2.3 Cross Site Scripting

Vulnerability ID: HTB22930 Reference: http://www.htbridge.ch/advisory/xssinwebcalendar.html Product: WebCalendar Vendor: k5n.us http://www.k5n.us/ Vulnerable Version: 1.2.3 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Bridge ...

WebCalendar 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/47328/info WebCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Cross-site Scripting (XSS) Vulnerability in WebCalendar

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WebCalendar which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WebCalendar The vulnerability exists due to input sanitation error in the "lastlogin" parameter in...