Php-calendar

Php-calendar

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2022-4455

  • EPSS 0.25%
  • Veröffentlicht 13.12.2022 18:15:10
  • Zuletzt bearbeitet 15.12.2025 19:16:00

A vulnerability was identified in sproctor php-calendar up to 2.0.13. This impacts an unknown function of the file index.php. Such manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be launched remotely. T...

6.1

CVE-2017-6485

  • EPSS 0.3%
  • Veröffentlicht 05.03.2017 20:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03. The vulnerability exists due to insufficient filtration of user-supplied data (errorMsg) passed to the "php-calendar-master/error.php" URL. An attacker could execute...

4.3

CVE-2010-2041

  • EPSS 0.52%
  • Veröffentlicht 25.05.2010 14:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the (1) description and (2) lastaction parameters.

7.5

CVE-2009-3702

  • EPSS 0.74%
  • Veröffentlicht 22.12.2009 19:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10.php. NOTE: in some environme...

7.5

CVE-2005-1397

  • EPSS 2.67%
  • Veröffentlicht 03.05.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

7.5

CVE-2004-1423

Exploit
  • EPSS 10.74%
  • Veröffentlicht 31.12.2004 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the...