CVEDB API

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.885

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2012-1495

Webcalendar Project » Webcalendar » Version: N/A

cpe:2.3:a:webcalendar_project:webcalendar:-
Webcalendar Project » Webcalendar » Version: 1.0

cpe:2.3:a:webcalendar_project:webcalendar:1.0
Webcalendar Project » Webcalendar » Version: 1.1.1

cpe:2.3:a:webcalendar_project:webcalendar:1.1.1
Webcalendar Project » Webcalendar » Version: 1.1.2

cpe:2.3:a:webcalendar_project:webcalendar:1.1.2
Webcalendar Project » Webcalendar » Version: 1.1.3

cpe:2.3:a:webcalendar_project:webcalendar:1.1.3
Webcalendar Project » Webcalendar » Version: 1.1.4

cpe:2.3:a:webcalendar_project:webcalendar:1.1.4
Webcalendar Project » Webcalendar » Version: 1.1.5

cpe:2.3:a:webcalendar_project:webcalendar:1.1.5
Webcalendar Project » Webcalendar » Version: 1.1.6

cpe:2.3:a:webcalendar_project:webcalendar:1.1.6
Webcalendar Project » Webcalendar » Version: 1.2

cpe:2.3:a:webcalendar_project:webcalendar:1.2
Webcalendar Project » Webcalendar » Version: 1.2.0

cpe:2.3:a:webcalendar_project:webcalendar:1.2.0
Webcalendar Project » Webcalendar » Version: 1.2.1

cpe:2.3:a:webcalendar_project:webcalendar:1.2.1
Webcalendar Project » Webcalendar » Version: 1.2.2

cpe:2.3:a:webcalendar_project:webcalendar:1.2.2
Webcalendar Project » Webcalendar » Version: 1.2.3

cpe:2.3:a:webcalendar_project:webcalendar:1.2.3
Webcalendar Project » Webcalendar » Version: 1.2.4

cpe:2.3:a:webcalendar_project:webcalendar:1.2.4