Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that probably include remote file inclusion and other issues.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Craig Knudsen WebCalendar includes/functions.php文件 任意变量重写漏洞
Vulnerability Description
Craig Knudsen WebCalendar 1.0.5之前的版本中的includes/functions.php文件没有保护来自外部修改的noSet变量，这使得远程攻击者可以借助noSet参数中包含有修改过的值的URL，设置任意的全域变量。这会导致漏洞出现和包含远程文件。
CVSS Information
N/A
Vulnerability Type
N/A