CVE-2011-3814

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/WebCalendar-1.2.3
• webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog
• openwall.com/lists/oss-security/2011/06/27/6

webcalendar のその他の脆弱性

• CVE-2024-1097中 5.4A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name…
• CVE-2012-0846中 4.3Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML v…
• CVE-2010-0638中 6.8Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators …
• CVE-2010-0637中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to …
• CVE-2010-0636中 4.3Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject …