CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
VendorProductVersion
webcalendar_projectwebcalendar
1.0:rc1
webcalendar_projectwebcalendar
1.0:rc2
webcalendar_projectwebcalendar
1.0:rc3
webcalendar_projectwebcalendar
1.1.1
webcalendar_projectwebcalendar
1.1.2
webcalendar_projectwebcalendar
1.1.3
webcalendar_projectwebcalendar
1.1.4
webcalendar_projectwebcalendar
1.1.5
webcalendar_projectwebcalendar
1.1.6
webcalendar_projectwebcalendar
1.2:b1
webcalendar_projectwebcalendar
1.2.0
webcalendar_projectwebcalendar
1.2.1
webcalendar_projectwebcalendar
1.2.2
webcalendar_projectwebcalendar
1.2.3
webcalendar_projectwebcalendar
1.2.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2
http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2