k5n

Top products

The 8 most recently published vulnerabilities affecting k5n.

• CVE-2024-1097Stored XSS in craigk5n/webcalendar5.4Nov 15, 2024
• CVE-2012-0846Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable.4.3Oct 8, 2012
• CVE-2011-3814WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error mess...5.0Sep 24, 2011
• CVE-2010-0638Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via ...6.8Feb 15, 2010
• CVE-2010-0636Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the (1) tab parameter to...4.3Feb 12, 2010
• CVE-2010-0637Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests ...6.8Feb 12, 2010
• CVE-2008-2836PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the ...7.5Jun 24, 2008
• CVE-2007-1483Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to (1) login.php, (2) get_reminde...7.5Mar 16, 2007