CVE-2012-0846
NONE EPSS 74.3%
Published Oct 8, 201213y ago · Modified Jun 16, 20262w ago
Published Oct 8, 2012 13y ago
Last Modified Jun 16, 2026 2w ago
Description
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable.
Threat Intelligence
EPSS Exploit Probability
74.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| k5n | webcalendar | 1.2.4 | any |
References 9
- archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2012-01/0129.html
- sourceforge.net http://sourceforge.net/tracker/?func=detail&aid=3472745&group_id=3870&atid=103870
- sourceforge.net http://sourceforge.net/tracker/?func=detail&aid=3488543&group_id=3870&atid=303870
- openwall.com http://www.openwall.com/lists/oss-security/2012/02/11/2
- openwall.com http://www.openwall.com/lists/oss-security/2012/02/12/1
- openwall.com http://www.openwall.com/lists/oss-security/2012/02/12/3
- openwall.com http://www.openwall.com/lists/oss-security/2012/02/13/6
- securityfocus.com http://www.securityfocus.com/bid/51600
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/72563
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.