CVE-2012-1495 install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
CriticalCVSS 9.8
EPSS 79.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webcalendar project webcalendar | < 1.2.5 | 1.2.5 |
References
- sourceforge.net release-notes third-party-advisory
- www.exploit-db.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry