Vulnerabilities

TI-2008-04815 CVE-2008-5062 · GHSA-crh3-m6cc-pcw5

Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2…

LOW 34

Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08064 Published 2008-11-13 No fix listed CWE-22

TI-2008-04814 CVE-2008-5061 · GHSA-7jvr-39f3-hx49

Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar…

LOW 26

Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0348 Published 2008-11-13 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2…

Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar…