Easyphpcalendar

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Easyphpcalendar records in CISA KEV

No Easyphpcalendar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easyphpcalendar 3 records LOW

Records

3 records in Easyphpcalendar · all components

TI-2005-02036 CVE-2005-2155 · GHSA-f6xp-2qfp-g88p

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows…

LOW 39

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03399 Published 2005-07-06 No fix listed

TI-2005-01082 CVE-2005-1144 · GHSA-mjgx-27h7-p48j

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive…

LOW 26

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01425 Published 2005-04-16 No fix listed

TI-2005-01081 CVE-2005-1143 · GHSA-pxf6-wchc-33ff

Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01208 Published 2005-04-16 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0