CVE-2012-1495

Related Files

WebCalendar 1.2.4 Remote Code Execution

Posted Apr 30, 2012

Authored by EgiX

WebCalendar versions 1.2.4 and below suffer from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2012-1495, CVE-2012-1496

SHA-256 | 505518c769aa0a8f543863fa3ee2b3bea199044e7d9263695e1c25fffbeb5719

Download | Favorite | View

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

Posted Apr 30, 2012

Authored by EgiX, sinn3r | Site metasploit.com

This Metasploit modules exploits a vulnerability found in WebCalendar versions 1.2.4 and below. If not removed, the settings.php script meant for installation can be updated by an attacker with injected code. This allows arbitrary code execution as www-data.

tags | exploit, arbitrary, php, code execution

advisories | CVE-2012-1495

SHA-256 | 29b4c547a774b448684e25b5a3790447dba6bd3752a031b9b5ce3b8d549c07cb

Download | Favorite | View