Export limit exceeded: 425902 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425902 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2007-1110

Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Activecalendar
Products
Activecalendar
CVE-2007-1111

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the css parameter to (1) flatevents.php, (2) js.php, (3) mysqlevents.php, (4) m_2.php, (5) m_3.php, (6) m_4.php, (7) xmlevents.php, (8) y_2.php, or (9) y_3.php in data/.

CVSS 2.0 · 6.8 Medium EPSS 6.1% KEV · Not listed
Vendors
Activecalendar
Products
Activecalendar