CVE-2005-3982: Undefined Security Weakness

CRLF injection vulnerability in layerstoggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests...

WebCalendar < 1.0.2 Multiple Vulnerabilities

The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...

webCalSQL.txt

WebCalendar Multiple Vulnerabilities. Author: lwang lwang at lwang.org Publish Date: 2005-12-1 Description: WebCalendar is a PHP application used to maintain a calendar for one or more persons and for a variety of purposes. In WebCalendar 0.1.0, activitylog.php and editreporthandler.php are prone...

CVE-2005-3961

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

CVE-2005-3949

Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...

CVE-2005-3961

WebCalendar 1.0.1 is affected by CVE-2005-3961 due to missing input sanitising in the export_handler.php flow, enabling remote attackers to overwrite local WebCalendar data files by supplying a modified id parameter. Multiple OpenVAS/NASL and CVE references confirm this vulnerability and characte...

CVE-2005-3949

CVE-2005-3949 affects webcalendar (PHP-based calendar). Connected sources confirm multiple SQL injection vulnerabilities in WebCalendar 1.0.1 that allow remote attackers to execute arbitrary SQL via the following vectors: (1) startid in activity_log.php, (2) startid in admin_handler.php, (3) temp...

CVE-2005-3949

Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...

CVE-2005-3961

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

CVE-2005-3949

Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...

CVE-2005-3961

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

CVE-2005-3961: Undefined Security Weakness

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

CVE-2005-3949: Undefined Security Weakness

Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 startid parameter to activitylog.php, 2 startid parameter to adminhandler.php, 3 template parameter to edittemplate.php, and 4 multiple parameters to exporthandler.php...

WebCalendar 1.0.1 - Multiple SQL Injections

WebCalendar 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic o...

WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting

WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...

WebCalendar 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation cou...

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web...

WebCalendar < 1.0.2 Multiple Vulnerabilities

Binary data 3303.prm...

[Full-disclosure] WebCalendar Multiple Vulnerabilities

WebCalendar Multiple Vulnerabilities Name Multiple Vulnerabilities in WebCalendar Systems Affected WebCalendar verified on 1.0.1 Severity Medium Risk Vendor www.k5n.us/webcalendar.php?topic=About Advisory http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities/ Advisory...

WebCalendar SQL Injection

The remote installation of WebCalendar may allow an attacker to cause an SQL Injection vulnerability in the program allowing an attacker to cause the program to execute arbitrary SQL statements. OpenVAS Vulnerability Test $Id: webcalendarsqlinjection.nasl 8023 2017-12-07 08:36:26Z teissa $...