Smolinari: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS Score
4.3
EPSS Score
0.054
Published
2008-11-13
Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter.
CVSS Score
5.0
EPSS Score
0.066
Published
2008-11-13