CVE-2012-1495

Description

References

• sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5 · Release Notes
• packetstormsecurity.com/files/112323/WebCalendar-1.2.4-Pre-Auth-Remote-Code-Injection.html · Exploit
• packetstormsecurity.com/files/112332/WebCalendar-1.2.4-Remote-Code-Execution.html · Exploit
• exploit-db.com/exploits/18775 · Exploit

webcalendar 的其他漏洞

• CVE-2024-22635中危 6.1WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/e…
• CVE-2013-1422中危 5.3webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").
• CVE-2012-1496高危 8.8Local file inclusion in WebCalendar before 1.2.5.
• CVE-2017-10841中危 4.9Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified ve…
• CVE-2017-10840中危 6.1Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifie…