CVE-2024-22635

概要

参考情報

• packetstormsecurity.com/files/176365/WebCalendar-1.3.0-Cross-Site-Scripting.html · Exploit

webcalendar のその他の脆弱性

• CVE-2013-1422中 5.3webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").
• CVE-2012-1496高 8.8Local file inclusion in WebCalendar before 1.2.5.
• CVE-2012-1495緊急 9.8install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
• CVE-2017-10841中 4.9Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified ve…
• CVE-2017-10840中 6.1Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifie…