← All advisories

Unrated severityNVD Advisory· Published Jan 27, 2020· Updated Aug 6, 2024

CVE-2012-1495

CVE-2012-1495

Description

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WebCalendar/WebCalendardescription
Webcalendar/Webcalendarllm-fuzzy
Range: <1.2.5

Patches

Vulnerability mechanics

References

4

sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/mitrex_refsource_MISC
packetstormsecurity.com/files/112323/WebCalendar-1.2.4-Pre-Auth-Remote-Code-Injection.htmlmitrex_refsource_MISC
packetstormsecurity.com/files/112332/WebCalendar-1.2.4-Remote-Code-Execution.htmlmitrex_refsource_MISC
www.exploit-db.com/exploits/18775mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.