| Package | Affected versions | Patched versions |
|---|---|---|
| webcalendar | < 1.2.5 | 1.2.5 |
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free