Phpicalendar

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Phpicalendar records in CISA KEV

No Phpicalendar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpicalendar 3 records LOW Php Icalendar 1 record LOW Phpicalendar2.0 1 record LOW

Records

3 records in Phpicalendar · all components

TI-2008-05663 CVE-2008-5967 · GHSA-5c74-rc32-qc6j

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative…

LOW 39

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar (aka .ics) file with arbitrary content…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03326 Published 2009-01-26 No fix listed CWE-287

TI-2008-05664 CVE-2008-5968 · GHSA-hh54-9j4p-xcwq

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows…

LOW 38

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02918 Published 2009-01-26 No fix listed CWE-22

TI-2008-05537 CVE-2008-5840 · GHSA-mwmq-3358-vg7q

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by…

LOW 38

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03017 Published 2009-01-05 No fix listed CWE-264

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0