CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors…

published October 11, 2012

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02173 · 82.0th percentile
Published
2012-10-11T15:00Z
EPSS history
Timeline
  • 11 OCT 15:00Z
    install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors…
    cvelistv5