SecurityTracker > View Topics > Vendor

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Apr 5 2011	WebCalendar Input Validation Flaw in 'edit_entry.php' Permits Cross-Site Scripting Attacks
Jun 25 2008	WebCalendar Include File Bug in 'send_reminders.php' Lets Remote Users Execute Arbitrary Code
May 30 2006	WebCalendar Include File Bug in 'includes/config.php' Lets Remote Users Execute Arbitrary Code
Sep 3 2005	WebCalendar Include File Bug in 'includedir' Parameter Lets Remote Users Execute Arbitrary Code
Feb 18 2005	WebCalendar user_valid_crypt function() Input Validation Error Lets Remote Users Inject SQL Commands
Nov 10 2004	WebCalendar Grants Administrative Access and Permits Cross-Site Scripting and HTTP Response Splitting Attacks
Sep 4 2003	WebCalendar Input Validation Flaws in Multiple Variables Permit Cross-Site Scripting Attacks and Possibly SQL Injection Attacks
Jul 21 2003	WebCalendar $user_inc Global Variable Lets Remote Users View Files on the System
Apr 23 2001	WebCalendar Allows Remote Users to Execute PHP Commands on the Server Without Authentication