TI-2022-04072 CVE-2022-4455 · GHSA-3957-4jhv-xcc7
sproctor php-calendar index.php cross site scripting
Priority LOW 24
A vulnerability was identified in sproctor php-calendar up to 2.0.13.
Vulnerabilities
6 records
TI-2017-04274 CVE-2017-6485 · GHSA-76rq-rhfj-3qrf
A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03.
Priority LOW 28
A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03.
TI-2010-01957 CVE-2010-2041 · GHSA-qjfj-8r88-5cc8
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before…
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the (1) description and (2) lastaction parameters.
TI-2009-03526 CVE-2009-3702 · GHSA-j3q3-9jvf-vrw4
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote…
Priority LOW 38
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10…
TI-2005-01320 CVE-2005-1397 · GHSA-58gq-v2m7-vhq9
SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote…
Priority LOW 36
SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
TI-2004-01300 CVE-2004-1423 · GHSA-w4p7-9h4j-6h5x
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before…
Priority MEDIUM 49
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbit…