{"uuid": "0c9eeb81-5e64-4f51-936b-f10a1a574596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-1495", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webcalendar_settings_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"EgiX\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in k5n.us WebCalendar, version 1.2.4 or\\n          less.  If not removed, the settings.php script meant for installation can be\\n          update by an attacker, and then inject code in it.  This allows arbitrary code\\n          execution as www-data.\", \"disclosure_date\": \"2012-04-23\", \"fullname\": \"exploit/linux/http/webcalendar_settings_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"WebCalendar 1.2.4 Pre-Auth Remote Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/webcalendar_settings_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/webcalendar_settings_exec\", \"references\": [\"CVE-2012-1495\", \"OSVDB-81329\", \"EDB-18775\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"WebCalendar 1.2.4 on Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.719201Z"}