high7.5
CVE-2012-5385
install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors rela…
Impact
install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webcalendar Project | Webcalendar | Versions 1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5 |