Read the docs

Calendar01 Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Calendar01 Project records in CISA KEV

No Calendar01 Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Calendar01 3 records MEDIUM

Records

3 records

TI-2020-04585 CVE-2020-5616 · GHSA-73rh-fgwv-4hpw

Improper authentication in PHP Factory [Calendar01], [Calendar02], [PKOBO-News01]…

Priority MEDIUM 48

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03064 Published 2020-08-04 No fix listed CWE-287
TI-2020-04584 CVE-2020-5615 · GHSA-7xw4-rm32-rvwj

Cross-site request forgery in PHP Factory [Calendar01] and [Calendar02]

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00699 Published 2020-08-04 No fix listed CWE-352
TI-2021-03951 CVE-2021-20725 · GHSA-62qp-vfx5-7cj5

Cross-site scripting in PHP Factory [Calendar01] free edition

Priority LOW 29

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00777 Published 2021-05-24 No fix listed CWE-79
Open these records in search →