CVE-2024-22635보통 6.1WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/e…
CVE-2013-1422보통 5.3webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").
CVE-2012-1495심각 9.8install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
CVE-2017-10841보통 4.9Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified ve…
CVE-2017-10840보통 6.1Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifie…