CVE-2005-2717: Webcalendar

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts.

Affected products

• Webcalendar Webcalendar: version 1.0.0 only

Published 2005-08-29. Last modified 2026-06-16.