WebCalendar SQL Injection (Nov 2005) - Active Check

The remote installation of WebCalendar may allow an attacker to cause an SQL Injection vulnerability in the program allowing an attacker to cause the program to execute arbitrary SQL statements. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced...

Debian DSA-799-1 : webcalendar - remote code execution

A trivially-exploitable bug was discovered in webcalendar that allows an attacker to execute arbitrary code with the privileges of the HTTP daemon on a system running a vulnerable version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...

DSA-799-1 webcalendar - input validation

Bulletin has no description...

CVE-2005-2717

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...

CVE-2005-2717

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...

CVE-2005-2717

The CVE-2005-2717 issue affects WebCalendar (pre-1.0.1) with a remote file inclusion vulnerability that lets an attacker execute arbitrary PHP code via settings.php or related scripts (e.g., send_reminders.php). Public sources describe a trivially-exploitable bug granting code execution with the ...

CVE-2005-2717

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...

CVE-2005-2717: Undefined Security Weakness

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...

WebCalendar -- remote file inclusion vulnerability

WebCalendar is proven vulnerable to a remote file inclusion vulnerability. The sendreminders.php does not properly verify the "includedir" parameter, giving remote attackers the possibility to include local and remote files. These files can be used by the attacker to gain access to the system...

WebCalendar send_reminders.php includedir Parameter Remote File Inclusion

The remote version of WebCalendar fails to sanitize user-supplied input to the 'includedir' parameter of the 'sendreminders.php' script. By leveraging this flaw, an attacker may be able to view arbitrary files on the remote host and execute arbitrary PHP code, possibly taken from third-party host...

WebCalendar < 1.0.1 send_reminders.php includedir Parameter Remote File Inclusion

Binary data 3182.prm...

Debian DSA-766-1 : webcalendar - authorisation failure

A vulnerability has been discovered in webcalendar, a PHP based multi-user calendar, that can lead to the disclosure of sensitive information to unauthorised parties. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 766-1 [email protected] http://www.debian.org/security/ Martin Schulze July 26th, 2005 http://www.debian.org/security/faq -...

DSA-766-1 webcalendar - authorisation failure

Bulletin has no description...

CVE-2005-2320

WebCalendar (PHP-based calendar) before 1.0.0 contains an access-control flaw in assistant_edit.php that can let remote attackers gain privileges. Affected versions are WebCalendar prior to 1.0.0; multiple advisories (Debian DSA-766-1, Red Hat CVE note) confirm an unauthorized-access/privilege di...

CVE-2005-2320

WebCalendar before 1.0.0 does not properly restrict access to assistantedit.php, which allows remote attackers to gain privileges...

CVE-2005-2320

WebCalendar before 1.0.0 does not properly restrict access to assistantedit.php, which allows remote attackers to gain privileges...

CVE-2005-2320

WebCalendar before 1.0.0 does not properly restrict access to assistantedit.php, which allows remote attackers to gain privileges...