CVE-2006-0206

Опубликовано: 13 янв. 2006

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.

Ссылки

http://attrition.org/pipermail/vim/2006-March/000612.html
http://evuln.com/vulns/29/exploit.html
Exploit
http://evuln.com/vulns/29/summary.html
Exploit
Vendor Advisory
http://secunia.com/advisories/18450
Exploit
Vendor Advisory
http://www.osvdb.org/22376
http://www.securityfocus.com/archive/1/421920
http://www.securityfocus.com/bid/16229
Exploit
http://www.vupen.com/english/advisories/2006/0171
https://exchange.xforce.ibmcloud.com/vulnerabilities/24110
http://attrition.org/pipermail/vim/2006-March/000612.html
http://evuln.com/vulns/29/exploit.html
Exploit
http://evuln.com/vulns/29/summary.html
Exploit
Vendor Advisory
http://secunia.com/advisories/18450
Exploit
Vendor Advisory
http://www.osvdb.org/22376
http://www.securityfocus.com/archive/1/421920
http://www.securityfocus.com/bid/16229
Exploit
http://www.vupen.com/english/advisories/2006/0171
https://exchange.xforce.ibmcloud.com/vulnerabilities/24110

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:light_weight_calendar:light_weight_calendar:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10246

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-m58g-r4fm-54mc

github

почти 4 года назад