k5n records
8 published records for vendor k5n.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2007-1483Proof of concept | Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in tk5n · webcalendar · CWE-94 | High7.5 | — | 4.1% | Mar 16, 2007 |
31Monitor | CVE-2008-2836Proof of concept | PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code viak5n · webcalendar · CWE-94 | High7.5 | — | 3.0% | Jun 24, 2008 |
27Monitor | CVE-2010-0637No exploit | Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to k5n · webcalendar · CWE-352 | Medium6.8 | — | 0.5% | Feb 12, 2010 |
27Monitor | CVE-2010-0638No exploit | Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators k5n · webcalendar · CWE-352 | Medium6.8 | — | 0.5% | Feb 15, 2010 |
21Monitor | CVE-2024-1097No exploit | Stored XSS in craigk5n/webcalendark5n · webcalendar · CWE-79 | Medium5.4 | — | 0.3% | Nov 15, 2024 |
20Monitor | CVE-2011-3814No exploit | WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php fk5n · webcalendar · CWE-200 | Medium5.0 | — | 1.2% | Sep 23, 2011 |
18Monitor | CVE-2012-0846No exploit | Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML vk5n · webcalendar · CWE-79 | Medium4.3 | — | 1.6% | Oct 8, 2012 |
17Monitor | CVE-2010-0636No exploit | Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject k5n · webcalendar · CWE-79 | Medium4.3 | — | 1.0% | Feb 12, 2010 |
- CVE-2007-148331Monitor
Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in t
HighCVSS 7.5Proof of conceptEPSS 4%k5n · webcalendarMar 16, 2007
- CVE-2008-283631Monitor
PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via
HighCVSS 7.5Proof of conceptEPSS 3%k5n · webcalendarJun 24, 2008
- CVE-2010-063727Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to
MediumCVSS 6.8No exploitEPSS 0%k5n · webcalendarFeb 12, 2010
- CVE-2010-063827Monitor
Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators
MediumCVSS 6.8No exploitEPSS 0%k5n · webcalendarFeb 15, 2010
- CVE-2024-109721Monitor
Stored XSS in craigk5n/webcalendar
MediumCVSS 5.4No exploitEPSS 0%k5n · webcalendarNov 15, 2024
- CVE-2011-381420Monitor
WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php f
MediumCVSS 5.0No exploitEPSS 1%k5n · webcalendarSep 23, 2011
- CVE-2012-084618Monitor
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML v
MediumCVSS 4.3No exploitEPSS 1%k5n · webcalendarOct 8, 2012
- CVE-2010-063617Monitor
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject
MediumCVSS 4.3No exploitEPSS 1%k5n · webcalendarFeb 12, 2010