webcalendar project kayıtları
webcalendar project üreticisine ait 10 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 1 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %10
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-203 Observable Discrepancy1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
63Bu hafta | CVE-2012-1495Silahlaştırılmış | install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.webcalendar project · webcalendar · CWE-74 | Kritik9,8 | %79,727 Oca 2020 |
36İzleyin | CVE-2012-1496Kavram kanıtı | Local file inclusion in WebCalendar before 1.2.5.webcalendar project · webcalendar · CWE-74 | Yüksek8,8 | %2,527 Oca 2020 |
31İzleyin | CVE-2012-5385İstismar yok | install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary cowebcalendar project · webcalendar · CWE-264 | Yüksek7,5 | %2,111 Eki 2012 |
24İzleyin | CVE-2017-10840İstismar yok | Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifiewebcalendar project · webcalendar · CWE-79 | Orta6,1 | %0,928 Ağu 2017 |
24İzleyin | CVE-2024-22635İstismar yok | WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/ewebcalendar project · webcalendar · CWE-79 | Orta6,1 | %0,425 Oca 2024 |
21İzleyin | CVE-2013-1422İstismar yok | webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").webcalendar project · webcalendar · CWE-203 | Orta5,3 | %1,64 Şub 2020 |
21İzleyin | CVE-2023-0289İstismar yok | Cross-site Scripting (XSS) - Stored in craigk5n/webcalendarwebcalendar project · webcalendar · CWE-79 | Orta5,4 | %0,513 Oca 2023 |
20İzleyin | CVE-2017-10841İstismar yok | Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vewebcalendar project · webcalendar · CWE-22 | Orta4,9 | %2,328 Ağu 2017 |
17İzleyin | CVE-2013-1421İstismar yok | Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attwebcalendar project · webcalendar · CWE-79 | Orta4,3 | %1,222 Nis 2014 |
17İzleyin | CVE-2012-5384İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTwebcalendar project · webcalendar · CWE-79 | Orta4,3 | %0,911 Eki 2012 |
- CVE-2012-149563Bu hafta
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
KritikCVSS 9,8SilahlaştırılmışEPSS %79webcalendar project · webcalendar27 Oca 2020
- CVE-2012-149636İzleyin
Local file inclusion in WebCalendar before 1.2.5.
YüksekCVSS 8,8Kavram kanıtıEPSS %2webcalendar project · webcalendar27 Oca 2020
- CVE-2012-538531İzleyin
install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary co
YüksekCVSS 7,5İstismar yokEPSS %2webcalendar project · webcalendar11 Eki 2012
- CVE-2017-1084024İzleyin
Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecifie
OrtaCVSS 6,1İstismar yokEPSS %0webcalendar project · webcalendar28 Ağu 2017
- CVE-2024-2263524İzleyin
WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/e
OrtaCVSS 6,1İstismar yokEPSS %0webcalendar project · webcalendar25 Oca 2024
- CVE-2013-142221İzleyin
webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").
OrtaCVSS 5,3İstismar yokEPSS %1webcalendar project · webcalendar4 Şub 2020
- CVE-2023-028921İzleyin
Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar
OrtaCVSS 5,4İstismar yokEPSS %0webcalendar project · webcalendar13 Oca 2023
- CVE-2017-1084120İzleyin
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified ve
OrtaCVSS 4,9İstismar yokEPSS %2webcalendar project · webcalendar28 Ağu 2017
- CVE-2013-142117İzleyin
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote att
OrtaCVSS 4,3İstismar yokEPSS %1webcalendar project · webcalendar22 Nis 2014
- CVE-2012-538417İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HT
OrtaCVSS 4,3İstismar yokEPSS %0webcalendar project · webcalendar11 Eki 2012