Lucene search
+L

441 matches found

OpenVAS
OpenVAS
added 2013/08/08 12:0 a.m.14 views

Fedora Update for WebCalendar FEDORA-2013-13454

Check for the Version of WebCalendar OpenVAS Vulnerability Test Fedora Update for WebCalendar FEDORA-2013-13454 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/08/08 12:0 a.m.13 views

Fedora Update for WebCalendar FEDORA-2013-13454

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/08/05 12:0 a.m.15 views

Fedora 18 : WebCalendar-1.2.7-1.fc18 (2013-13454)

Tue Jul 23 2013 Patrick Monnerat 1.2.7-1 - New upstream release security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

5.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/08/05 12:0 a.m.22 views

Fedora 19 : WebCalendar-1.2.7-1.fc19 (2013-13484)

Tue Jul 23 2013 Patrick Monnerat 1.2.7-1 - New upstream release security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

5.4AI score
SaveExploits0References2
Fedora
Fedora
added 2013/08/02 9:51 p.m.14 views

[SECURITY] Fedora 19 Update: WebCalendar-1.2.7-1.fc19

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...

3.1AI score
SaveExploits0
NVD
NVD
added 2012/10/11 3:55 p.m.24 views

CVE-2012-5384

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

4.3CVSS5.5AI score0.00931EPSS
SaveExploits0References2
NVD
NVD
added 2012/10/11 3:55 p.m.19 views

CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

7.5CVSS7.5AI score0.02173EPSS
SaveExploits0References1
Prion
Prion
added 2012/10/11 3:55 p.m.16 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

4.3CVSS5.9AI score0.01693EPSS
SaveExploits1References2
Prion
Prion
added 2012/10/11 3:55 p.m.15 views

Code injection

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

7.5CVSS8.2AI score0.02173EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2012/10/11 3:0 p.m.51 views

CVE-2012-5384

CVE-2012-5384 and related entries describe multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar. The flaws allow remote attackers to inject arbitrary script/HTML by manipulating parameters in edit_entry_handler.php (name/description) and view_entry.php (url, tempfullna...

4.3CVSS5.5AI score0.00931EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2012/10/11 3:0 p.m.20 views

CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

7.5AI score0.02173EPSS
SaveExploits0References1
CVE
CVE
added 2012/10/11 3:0 p.m.47 views

CVE-2012-5385

CVE-2012-5385 affects Craig Knudsen WebCalendar prior to 1.2.5. The vulnerability is in install/index.php, where remote attackers can modify settings.php and potentially execute arbitrary code via vectors related to the user theme preference. The CVE documents do not provide exploitation details ...

7.5CVSS7.8AI score0.02173EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2012/10/11 3:0 p.m.29 views

CVE-2012-5384

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

5.5AI score0.00931EPSS
SaveExploits0References2
NVD
NVD
added 2012/10/08 8:55 p.m.27 views

CVE-2012-0846

Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...

4.3CVSS5.5AI score0.01693EPSS
SaveExploits1References9
Prion
Prion
added 2012/10/08 8:55 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...

4.3CVSS5.8AI score0.01693EPSS
SaveExploits1References9Affected Software1
CVE
CVE
added 2012/10/08 8:0 p.m.73 views

CVE-2012-0846

CVE-2012-0846 is an XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 that allows remote injection of arbitrary scripts/HTML via the Location variable. The connected records for CVE-2012-5384 describe additional XSS vectors affecting the same WebCalendar product (including parameters in edit_e...

4.3CVSS5.5AI score0.01693EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2012/10/08 8:0 p.m.38 views

CVE-2012-0846

Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable...

5.4AI score0.01693EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.20 views

Fedora Update for WebCalendar FEDORA-2012-1898

Check for the Version of WebCalendar OpenVAS Vulnerability Test Fedora Update for WebCalendar FEDORA-2012-1898 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

4.3CVSS6.4AI score0.01693EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.32 views

Fedora Update for WebCalendar FEDORA-2012-1898

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS6.5AI score0.01693EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2012/05/31 12:0 a.m.19 views

FreeBSD Ports: WebCalendar-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID 18dffa02-946a-11e1-be9d-000c29cc39d3 OpenVAS Vulnerability Test $ Description: Auto generated from VID 18dffa02-946a-11e1-be9d-000c29cc39d3 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

9.2AI score0.79764EPSS
SaveExploits15
Rows per page
Query Builder