WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php.
2004-12-31T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | webcalendar | webcalendar | 0.9.8 | No |
Application | webcalendar | webcalendar | 0.9.11 | No |
Application | webcalendar | webcalendar | 0.9.15 | No |
Application | webcalendar | webcalendar | 0.9.16 | No |
Application | webcalendar | webcalendar | 0.9.19 | No |
Application | webcalendar | webcalendar | 0.9.20 | No |
Application | webcalendar | webcalendar | 0.9.21 | No |
Application | webcalendar | webcalendar | 0.9.22 | No |
Application | webcalendar | webcalendar | 0.9.23 | No |
Application | webcalendar | webcalendar | 0.9.24 | No |
Application | webcalendar | webcalendar | 0.9.25 | No |
Application | webcalendar | webcalendar | 0.9.26 | No |
Application | webcalendar | webcalendar | 0.9.27 | No |
Application | webcalendar | webcalendar | 0.9.28 | No |
Application | webcalendar | webcalendar | 0.9.29 | No |
Application | webcalendar | webcalendar | 0.9.30 | No |
Application | webcalendar | webcalendar | 0.9.31 | No |
Application | webcalendar | webcalendar | 0.9.32 | No |
Application | webcalendar | webcalendar | 0.9.33 | No |
Application | webcalendar | webcalendar | 0.9.34 | No |
Application | webcalendar | webcalendar | 0.9.35 | No |
Application | webcalendar | webcalendar | 0.9.36 | No |
Application | webcalendar | webcalendar | 0.9.37 | No |
Application | webcalendar | webcalendar | 0.9.38 | No |
Application | webcalendar | webcalendar | 0.9.39 | No |
Application | webcalendar | webcalendar | 0.9.40 | No |
Application | webcalendar | webcalendar | 0.9.41 | No |
Application | webcalendar | webcalendar | 0.9.42 | No |
Application | webcalendar | webcalendar | 0.9.43 | No |
Application | webcalendar | webcalendar | 0.9.44 | No |