CVE-2010-0636

概要

参考情報

• holisticinfosec.org/content/view/133/45
• secunia.com/advisories/38222 · Vendor Advisory
• webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog
• securityfocus.com/bid/38053

webcalendar のその他の脆弱性

• CVE-2024-1097中 5.4A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name…
• CVE-2012-0846中 4.3Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML v…
• CVE-2011-3814中 5.0WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php f…
• CVE-2010-0638中 6.8Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators …
• CVE-2010-0637中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to …