CVE-2012-5385

N/A

Descricao

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado10/11/2012

Ultima modificacao4/11/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

webcalendar_project:webcalendar

Fraquezas (CWE)

CWE-264

Referencias

http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2(cve@mitre.org)

http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.