Extcalendar

Vendor:

First CVE: Mar 21, 2006 · Active for 20 years

3
Total CVEs
Bottom 1%
1.5
Avg CVEs / Year
Bottom 1%
7.2
Avg CVSS
Higher Avg CVSS than 88% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Extcalendar over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 21, 2006
20 years ago
Most Recent CVE
Feb 3, 2007
7,115 days ago

CVE Severity & Scoring

Extcalendar3 CVEs
All CVEs353,173 CVEs
MediumCritical
Attack Vector
Local0 (0.0%)
Network1 (33.3%)
Unknown2 (66.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (33.3%)
High0 (0.0%)
Unknown2 (66.7%)
User Interaction
None1 (33.3%)
Unknown2 (66.7%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (33.3%)
Unknown2 (66.7%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unau
Feb 3, 20079.842NOYES
PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absol
Jul 13, 20066.829NOYES
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the
Mar 21, 20065.025NOYES

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
100.0% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For Extcalendar

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.016.86.8%01
1.015.06.6%01