Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Calendar02 Project Clear all filters
TI-2020-04585 CVE-2020-5616 · GHSA-73rh-fgwv-4hpw

Improper authentication in PHP Factory [Calendar01], [Calendar02], [PKOBO-News01]…

Priority MEDIUM 48

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03064 Published 2020-08-04 No fix listed CWE-287
TI-2020-04584 CVE-2020-5615 · GHSA-7xw4-rm32-rvwj

Cross-site request forgery in PHP Factory [Calendar01] and [Calendar02]

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00699 Published 2020-08-04 No fix listed CWE-352