CVE-2010-0637
NONE
Published Feb 12, 201016y ago · Modified Jun 16, 20262w ago
Published Feb 12, 2010 16y ago
Last Modified Jun 16, 2026 2w ago
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that (1) delete an event or (2) ban an IP address from posting via unknown vectors. NOTE: some of these details are obtained from third party information.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-352 Cross-Site Request Forgery (CSRF) Authentication
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| k5n | webcalendar | 1.2.0 | any |
References 3
- holisticinfosec.org http://holisticinfosec.org/content/view/133/45/
- secunia.com http://secunia.com/advisories/38222
- webcalendar.cvs.sourceforge.net http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.