← All advisories

Critical severity9.8NVD Advisory· Published Jan 27, 2020· Updated Jun 16, 2026

CVE-2012-1495

CVE-2012-1495

Description

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Webcalendar/Webcalendar2 versions
cpe:2.3:a:webcalendar_project:webcalendar:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:webcalendar_project:webcalendar:*:*:*:*:*:*:*:*range: <1.2.5
- (no CPE)range: <1.2.5
WebCalendar/WebCalendardescription

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/112323/WebCalendar-1.2.4-Pre-Auth-Remote-Code-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/112332/WebCalendar-1.2.4-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/18775nvdExploitThird Party AdvisoryVDB Entry
sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.