CVE-2001-0477

CVE-2001-0477 affects WebCalendar 0.9.26 and enables remote command execution due to improper input validation in the WebCalendar Web application (PHP). The CERT entry states that arbitrary commands can be executed by a malicious WebCalendar user, with the potential bypass in single-user mode whe...

(SRPRE00004) WebCalendar 0.9.26

================================================= Secure Reality Pty Ltd. Security Pre-Advisory 4 SRPRE00004 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in WebCalendar Released 23/4/2001 This is a pre-release. Th...