Vulnerabilities

TI-2024-15086 CVE-2024-22635 · GHSA-9rf9-hjjr-q4r4

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS)…

MEDIUM 60

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00459 Published 2024-01-25 No fix listed CWE-79

TI-2023-00274 CVE-2023-0289 · GHSA-8q3w-w8q9-w8gf

Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00541 Published 2023-01-13 Fixed in master CWE-79

TI-2013-01241 CVE-2013-1422 · GHSA-qh6m-c8xw-mj43

webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").

LOW 27

webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01621 Published 2020-02-04 No fix listed CWE-203

TI-2012-01308 CVE-2012-1495 · GHSA-5whg-989c-xx4x

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute…

HIGH 82

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.79764 Published 2020-01-27 No fix listed CWE-74

TI-2012-01309 CVE-2012-1496 · GHSA-vw47-w94h-267c

Local file inclusion in WebCalendar before 1.2.5.

MEDIUM 43

Local file inclusion in WebCalendar before 1.2.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02531 Published 2020-01-27 No fix listed CWE-74

TI-2017-07942 CVE-2017-10841 · GHSA-33c3-8653-qmxw

Path traversal in k5n.us WebCalendar

LOW 27

Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02353 Published 2017-08-28 No fix listed CWE-22

TI-2017-07941 CVE-2017-10840 · GHSA-rg28-qhrf-c54c

Cross-site scripting in k5n.us WebCalendar

LOW 29

Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00934 Published 2017-08-28 No fix listed CWE-79

TI-2013-01240 CVE-2013-1421 · GHSA-qmxr-pxhp-w64j

Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5…

LOW 23

Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to cat…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0124 Published 2014-04-22 No fix listed CWE-79

TI-2012-04558 CVE-2012-5385 · GHSA-mqjj-cmr8-p9p2

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to…

LOW 37

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02173 Published 2012-10-11 No fix listed CWE-264

TI-2012-04557 CVE-2012-5384 · GHSA-6q3q-3c99-2m5v

Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the (1) $name or (2) $description variables in edit_entry_handler.php, or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2012-10-11 No fix listed CWE-79

Vulnerabilities

Filters