Skip to content
Noroxi

php-calendar records

6 published records for vendor php-calendar.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2004-1423
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virt

    HighCVSS 7.5Proof of conceptEPSS 15%

    php-calendar · php-calendarDec 31, 2004

  • CVE-2009-3702
    31Monitor

    Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via

    HighCVSS 7.5Proof of conceptEPSS 2%

    php-calendar · php-calendarDec 22, 2009

  • CVE-2005-1397
    31Monitor

    SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unkno

    HighCVSS 7.5No exploitEPSS 2%

    php-calendar · php-calendarMay 3, 2005

  • CVE-2017-6485
    24Monitor

    A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03.

    MediumCVSS 6.1No exploitEPSS 1%

    php-calendar · php-calendarMar 5, 2017

  • CVE-2022-4455
    20Monitor

    sproctor php-calendar index.php cross site scripting

    MediumCVSS 5.1No exploitEPSS 1%

    php-calendar · php-calendarDec 13, 2022

  • CVE-2010-2041
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary

    MediumCVSS 4.3No exploitEPSS 1%

    php-calendar · php-calendarMay 25, 2010