CVE-2017-10841

Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2017-10841

Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10841

CVE-2017-10841 affects WebCalendar 1.2.7 and earlier, with a directory traversal vulnerability that allows authenticated attackers to read arbitrary files via unspecified vectors. Affected software is WebCalendar (PHP-based calendar application); impact is partial confidentiality loss for targete...