Skip to content
OpenAdvisories
Unscored DSA-1267-1 1 CVE

webcalendar - missing input sanitising

Published Mar 15, 2007 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 webcalendar 0.9.45-4sarge6

Vulnerabilities 1

  • Unscored —

    includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modi…