Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Calendar01 Project Component: Calendar01 Clear all filters
TI-2021-03951 CVE-2021-20725 · GHSA-62qp-vfx5-7cj5

Cross-site scripting in PHP Factory [Calendar01] free edition

Priority LOW 29

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00777 Published 2021-05-24 No fix listed CWE-79
TI-2020-04585 CVE-2020-5616 · GHSA-73rh-fgwv-4hpw

Improper authentication in PHP Factory [Calendar01], [Calendar02], [PKOBO-News01]…

Priority MEDIUM 48

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03064 Published 2020-08-04 No fix listed CWE-287
TI-2020-04584 CVE-2020-5615 · GHSA-7xw4-rm32-rvwj

Cross-site request forgery in PHP Factory [Calendar01] and [Calendar02]

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00699 Published 2020-08-04 No fix listed CWE-352