Description
install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.
Unscored
CVE-2012-5385
EUVD-2012-5304GHSA-mqjj-cmr8-p9p2
install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary c…
Published Oct 11, 2012 · Updated Sep 17, 2024 · Assigned by mitre