CVE-2017-10841

概要

参考情報

• craigk5n/webcalendar release v1.2.8 · Issue Tracking
• jvn.jp/en/jp/JVN23340457/index.html · Third Party Advisory

webcalendar のその他の脆弱性

• CVE-2024-22635中 6.1WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/e…
• CVE-2013-1422中 5.3webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").
• CVE-2012-1496高 8.8Local file inclusion in WebCalendar before 1.2.5.
• CVE-2012-1495緊急 9.8install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
• CVE-2017-10840中 6.1Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifie…