Known Vulnerabilities for products from Webcalendar
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Webcalendar".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2008-1954 json | SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary S... | Not Provided | 2008-04-25 | 2026-04-23 |
| CVE-2007-6696 json | Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web scrip... | Not Provided | 2008-02-01 | 2026-04-23 |
| CVE-2007-1343 json | includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modificati... | Not Provided | 2007-03-08 | 2026-04-23 |
| CVE-2006-6669 json | Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to in... | Not Provided | 2006-12-20 | 2026-04-23 |
| CVE-2006-2762 json | PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitr... | 6.4 - MEDIUM | 2006-06-02 | 2018-10-18 |
| CVE-2006-2247 json | WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows r... | Not Provided | 2006-05-09 | 2025-04-03 |
| CVE-2006-1537 json | Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) inclu... | Not Provided | 2006-03-30 | 2025-04-03 |
| CVE-2005-3984 json | SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the time_range... | Not Provided | 2005-12-04 | 2025-04-03 |
| CVE-2005-3982 json | CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers an... | Not Provided | 2005-12-04 | 2025-04-03 |
| CVE-2005-3961 json | export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id paramet... | Not Provided | 2005-12-01 | 2025-04-03 |
| CVE-2005-3949 json | Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the ... | Not Provided | 2005-12-01 | 2025-04-03 |
| CVE-2005-2717 json | PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code whe... | Not Provided | 2005-08-29 | 2025-04-03 |
| CVE-2005-2320 json | WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privi... | Not Provided | 2005-07-19 | 2025-04-03 |
| CVE-2005-0474 json | SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to exe... | Not Provided | 2005-03-30 | 2025-04-03 |
| CVE-2004-1510 json | WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming... | Not Provided | 2004-12-31 | 2025-04-03 |
| CVE-2004-1509 json | validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, whi... | Not Provided | 2004-12-31 | 2025-04-03 |
| CVE-2004-1508 json | init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter. | Not Provided | 2004-12-31 | 2025-04-03 |
| CVE-2004-1507 json | CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path... | Not Provided | 2004-12-31 | 2025-04-03 |
| CVE-2004-1506 json | Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via ... | Not Provided | 2004-12-31 | 2025-04-03 |
| CVE-2002-2065 json | WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary includ... | Not Provided | 2002-12-31 | 2025-04-03 |