CVE-2012-5385

HIGH 7.5CVE-2012-5385 · Published 11/10/2012 · updated 16/06/2026

In short

CVE-2012-5385 is a HIGH (CVSS 7.5) vulnerability affecting webcalendar (webcalendar project).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webcalendar webcalendar_project	`= 1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.2= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4`	No fix yet

Description

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.

References

webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog

More vulnerabilities in webcalendar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free