CVE-2012-5385 install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webcalendar project webcalendar | = 1.0-rc1 | No fix listed |
| webcalendar project webcalendar | = 1.0-rc2 | No fix listed |
| webcalendar project webcalendar | = 1.0-rc3 | No fix listed |
| webcalendar project webcalendar | = 1.1.1 | No fix listed |
| webcalendar project webcalendar | = 1.1.2 | No fix listed |
| webcalendar project webcalendar | = 1.1.3 | No fix listed |
| webcalendar project webcalendar | = 1.1.4 | No fix listed |
| webcalendar project webcalendar | = 1.1.5 | No fix listed |
| webcalendar project webcalendar | = 1.1.6 | No fix listed |
| webcalendar project webcalendar | = 1.2-b1 | No fix listed |
| webcalendar project webcalendar | = 1.2.0 | No fix listed |
| webcalendar project webcalendar | = 1.2.1 | No fix listed |
| webcalendar project webcalendar | = 1.2.2 | No fix listed |
| webcalendar project webcalendar | = 1.2.3 | No fix listed |
| webcalendar project webcalendar | = 1.2.4 | No fix listed |