Unscored DSA-1002-1 4 CVEs

webcalendar - several

Published Mar 15, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	webcalendar	0.9.45-4sarge3

Vulnerabilities 4

Unscored —

CVE-2005-3949

Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands vi…

Dec 1, 2005
Unscored —

CVE-2005-3961

export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id p…

Dec 1, 2005
Unscored —

CVE-2005-3982 Public exploit

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP head…

Dec 4, 2005
Unscored —

CVE-2005-3984

SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the time…

Dec 4, 2005