Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
K5nWebcalendar

8 matches found

CVE
CVE•added 2007/03/16 9:19 p.m.•70 views

CVE-2007-1483

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to (1) login.php, (2) get_reminders.php, or (3) get_events.php.

7.5CVSS7.5AI score0.07013EPSS
CVE
CVE•added 2012/10/08 8:55 p.m.•56 views

CVE-2012-0846

Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable.

4.3CVSS5.5AI score0.00619EPSS
CVE
CVE•added 2010/02/12 10:30 p.m.•47 views

CVE-2010-0636

Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the (1) tab parameter to users.php and the PATH_INFO to (2) day.php, (3) month.php, and (4) week.php. NOTE: some of these deta...

4.3CVSS5.8AI score0.00285EPSS
CVE
CVE•added 2010/02/12 10:30 p.m.•45 views

CVE-2010-0637

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that (1) delete an event or (2) ban an IP address from posting via unknown vectors. NOTE: some of thes...

6.8CVSS7.3AI score0.00134EPSS
CVE
CVE•added 2024/11/15 11:15 a.m.•44 views

CVE-2024-1097

A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name' input field while creating a new report. An attacker can inject malicious scripts, which are then executed in the context of other users who view the report,...

7.6CVSS5.9AI score0.00057EPSS
CVE
CVE•added 2010/02/15 6:30 p.m.•42 views

CVE-2010-0638

Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely ...

6.8CVSS7.2AI score0.00122EPSS
CVE
CVE•added 2011/09/24 12:55 a.m.•41 views

CVE-2011-3814

WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ws/user_mod.php and certain other files.

5CVSS6.3AI score0.00294EPSS
CVE
CVE•added 2008/06/24 7:41 p.m.•40 views

CVE-2008-2836

PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483.

7.5CVSS7.4AI score0.07013EPSS