441 matches found
CVE-2013-1422
webcalendar before 1.2.7 shows the reason for a failed login e.g., "no such user"...
CVE-2013-1422
CVE-2013-1422 affects webCalendar (WebCalendar) prior to version 1.2.7. The flaw is that failed-login responses leak the reason (e.g., “no such user”), enabling user enumeration by an attacker via authentication attempts. The vulnerability is tied to the login error messaging rather than a fully ...
CVE-2012-1496
Local file inclusion in WebCalendar before 1.2.5...
CVE-2012-1495
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
Code injection
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
Remote file inclusion
Local file inclusion in WebCalendar before 1.2.5...
CVE-2012-1495
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
CVE-2012-1495
WebCalendar is affected by CVE-2012-1495: install/index.php in WebCalendar versions before 1.2.5 allows remote code execution via the form_single_user_login parameter (pre-auth). The vulnerability enables arbitrary code execution with web user privileges and has multiple public references detaili...
CVE-2012-1496
Local file inclusion in WebCalendar before 1.2.5...
CVE-2012-1496
CVE-2012-1496 affects WebCalendar prior to 1.2.5. Multiple sources document local file inclusion (LFI) in WebCalendar, with OpenVAS also listing PHP code injection in WebCalendar 1.2.4. The common impact is arbitrary file read and potential code execution within the vulnerable web application con...
Fedora 27 : WebCalendar (2017-6abd55703b)
New upstream release. Fixes CVE-2017-10840 and CVE-2017-10841. Upstream moved from sourceforge to github. PHP = 5.3 required. Adjust httpd configuration to support PHP FCGI. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora 25 : WebCalendar (2017-26a53ccbdf)
New upstream release. Fixes CVE-2017-10840 and CVE-2017-10841. Upstream moved from sourceforge to github. PHP = 5.3 required. Adjust httpd configuration to support PHP FCGI. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora 26 : WebCalendar (2017-c9abeb3158)
New upstream release. Fixes CVE-2017-10840 and CVE-2017-10841. Upstream moved from sourceforge to github. PHP = 5.3 required. Adjust httpd configuration to support PHP FCGI. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora Update for WebCalendar FEDORA-2017-c9abeb3158
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for WebCalendar FEDORA-2017-26a53ccbdf
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 26 Update: WebCalendar-1.2.9-1.fc26
WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...
[SECURITY] Fedora 27 Update: WebCalendar-1.2.9-1.fc27
WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...
CVE-2017-10841
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors...
