Webcalendar Security Vulnerabilities and Issues — Webcalendar CVE List

Lucene search

K5nWebcalendar

3 matches found

CVE•added 2007/03/16 9:19 p.m.•70 views

CVE-2007-1483

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to (1) login.php, (2) get_reminders.php, or (3) get_events.php.

7.5CVSS7.5AI score0.07013EPSS

CVE•added 2024/11/15 11:15 a.m.•44 views

CVE-2024-1097

A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name' input field while creating a new report. An attacker can inject malicious scripts, which are then executed in the context of other users who view the report,...

7.6CVSS5.9AI score0.00078EPSS

Web

CVE•added 2008/06/24 7:41 p.m.•40 views

CVE-2008-2836

PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483.

7.5CVSS7.4AI score0.07013EPSS