New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Question about two vulnerabilities in WebCalendar v1.2.7 #382

Open

fgeek opened this issue Jul 29, 2023 · 1 comment

fgeek commented Jul 29, 2023

Hello,

Can you tell me in which version these vulnerabilities has been fixed, thanks?

http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-PHP-CODE-INJECTION.txt
http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-CSRF-PROTECTION-BYPASS.txt

I am adding detection for these to https://github.com/fgeek/pyfiscan security scanner (works locally).

Owner

craigk5n commented Sep 13, 2023

The second one is fixed as of v1.9.8.
Not sure on the first one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment