CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

CVE-2012-5385

CVE-2012-5385 affects Craig Knudsen WebCalendar prior to 1.2.5. The vulnerability is in install/index.php, where remote attackers can modify settings.php and potentially execute arbitrary code via vectors related to the user theme preference. The CVE documents do not provide exploitation details ...