Php-calendar

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Php-calendar records in CISA KEV

No Php-calendar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php-calendar 6 records MEDIUM

Records

6 records

TI-2004-01300 CVE-2004-1423 · GHSA-w4p7-9h4j-6h5x

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before…

MEDIUM 49

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbit…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.15469 Published 2005-02-12 No fix listed CWE-94

TI-2009-03526 CVE-2009-3702 · GHSA-j3q3-9jvf-vrw4

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote…

LOW 38

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02447 Published 2009-12-22 No fix listed CWE-22

TI-2005-01320 CVE-2005-1397 · GHSA-58gq-v2m7-vhq9

SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote…

LOW 36

SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01814 Published 2005-05-02 No fix listed

TI-2017-04274 CVE-2017-6485 · GHSA-76rq-rhfj-3qrf

A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03.

LOW 28

A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00664 Published 2017-03-05 No fix listed CWE-79

TI-2022-04072 CVE-2022-4455 · GHSA-3957-4jhv-xcc7

sproctor php-calendar index.php cross site scripting

LOW 24

A vulnerability was identified in sproctor php-calendar up to 2.0.13.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0062 Published 2022-12-13 No fix listed CWE-79

TI-2010-01957 CVE-2010-2041 · GHSA-qjfj-8r88-5cc8

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the (1) description and (2) lastaction parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01263 Published 2010-05-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0