CVE-2005-3961

export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter.

• http://secunia.com/advisories/17784Vendor Advisory
• http://secunia.com/advisories/19240Vendor Advisory
• http://securityreason.com/securityalert/215
• http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587
• http://www.debian.org/security/2006/dsa-1002
• http://www.osvdb.org/21220
• http://www.securityfocus.com/archive/1/417900/100/0/threaded
• http://www.securityfocus.com/bid/15608
• http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilitiesVendor Advisory
• http://www.vupen.com/english/advisories/2005/2643Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23370
• http://secunia.com/advisories/17784Vendor Advisory
• http://secunia.com/advisories/19240Vendor Advisory
• http://securityreason.com/securityalert/215
• http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587
• http://www.debian.org/security/2006/dsa-1002
• http://www.osvdb.org/21220
• http://www.securityfocus.com/archive/1/417900/100/0/threaded
• http://www.securityfocus.com/bid/15608
• http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilitiesVendor Advisory
• http://www.vupen.com/english/advisories/2005/2643Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23370

Published

Dec 1, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3955Multiple cross-site scripting (XSS) vulnerabilities in Magpi…
• CVE-2005-3956Multiple SQL injection vulnerabilities in index.php in DMANe…
• CVE-2005-3957Unspecified vulnerability in the Trackback functionality in …
• CVE-2005-3958SQL injection vulnerability in index.php in Entergal MX 2.0 …
• CVE-2005-3959Multiple cross-site scripting (XSS) vulnerabilities in FreeW…
• CVE-2005-3960Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a d…
• CVE-2005-3962Integer overflow in the format string functionality (Perl_sv…
• CVE-2005-3963SQL injection vulnerability in session.php in DotClear befor…
• CVE-2005-3964Multiple buffer overflows in libUil (libUil.so) in OpenMotif…
• CVE-2005-3965Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3966Cross-site scripting (XSS) vulnerability in search.jsp in Ja…
• CVE-2005-3967Cross-site scripting (XSS) vulnerability in the dosearchsite…