CVE-2024-22635TRUNG BÌNH 6.1WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/e…
CVE-2013-1422TRUNG BÌNH 5.3webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").
CVE-2012-1495NGHIÊM TRỌNG 9.8install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
CVE-2017-10841TRUNG BÌNH 4.9Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified ve…
CVE-2017-10840TRUNG BÌNH 6.1Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifie…