ID de Prueba:	1.3.6.1.4.1.25623.1.0.103476
Categoría:	Web application abuses
Título:	WebCalendar <= 1.2.4 Multiple Vulnerabilities - Active Check
Resumen:	WebCalendar is prone to multiple input validation; vulnerabilities because it fails to properly sanitize user-supplied input.
Descripción:	Summary: WebCalendar is prone to multiple input validation vulnerabilities because it fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker can exploit these issues to inject arbitrary PHP code and include and execute arbitrary files from the vulnerable system in the context of the affected application. Affected Software/OS: WebCalendar version 1.2.4 and probably prior. Solution: Reports indicate vendor updates are available. Please contact the vendor for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1495 http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.5/ https://packetstormsecurity.com/files/112323/WebCalendar-1.2.4-Pre-Auth-Remote-Code-Injection.html https://packetstormsecurity.com/files/112332/WebCalendar-1.2.4-Remote-Code-Execution.html https://www.exploit-db.com/exploits/18775 Common Vulnerability Exposure (CVE) ID: CVE-2012-1496
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.