Vulnerabilities (CVE)

Filtered by vendor Smolinari Subscribe
Filtered by product Mini Web Calendar
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-5061 1 Smolinari 1 Mini Web Calendar 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVE-2008-5062 1 Smolinari 1 Mini Web Calendar 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter.