Browse CVEs

MEDIUM 6.8 CVE-2006-6669 Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web scrip… Webcalendar Mitigation only Fix from $1,6002006-12-20 MEDIUM 6.4 CVE-2006-2762 PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL i… Webcalendar Mitigation only Fix from $1,6002006-06-02 MEDIUM 5.0 CVE-2006-2247 WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enume… Webcalendar Mitigation only Fix from $1,6002006-05-09 MEDIUM 5.0 CVE-2006-1537 Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) includes/index.php, (2) tests… Webcalendar Mitigation only Fix from $1,6002006-03-30 HIGH 7.5 CVE-2005-3949 Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to… Webcalendar Mitigation only Fix from $1,9502005-12-01 MEDIUM 5.0 CVE-2005-3961 export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter. Webcalendar Mitigation only Fix from $1,6002005-12-01 HIGH 7.5 CVE-2004-1508 init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter. Webcalendar Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-1507 CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform H… Webcalendar No fix yet Fix from $1,6002004-12-31