CVE-2005-3949

概要

参考情報

• secunia.com/advisories/17784 · Vendor Advisory
• secunia.com/advisories/19240
• securityreason.com/securityalert/215
• sourceforge.net/forum/forum.php
• debian.org/security/2006/dsa-1002
• osvdb.org/21216
• osvdb.org/21217
• osvdb.org/21218
• osvdb.org/21219
• securityfocus.com/archive/1/417900/100/0/threaded
• securityfocus.com/archive/1/418286/100/0/threaded
• securityfocus.com/bid/15606
• securityfocus.com/bid/15608
• securityfocus.com/bid/15662
• ush.it/2005/11/28/webcalendar-multiple-vulnerabilities · Vendor Advisory
• vupen.com/english/advisories/2005/2643
• exchange.xforce.ibmcloud.com/vulnerabilities/23369

webcalendar のその他の脆弱性

• CVE-2007-6696低 2.1Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (…
• CVE-2007-1343高 7.5includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allow…
• CVE-2006-6669中 6.8Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary …
• CVE-2006-2762中 6.4PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code vi…
• CVE-2006-2247中 5.0WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers…