Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php icalendar php icalendar 2.0c vulnerabilities and exploits

(subscribe to this query)
605
VMScore
CVE-2005-3366
PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 up to and including 2.0.1 allows remote malicious users to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claime...
Php Icalendar Php Icalendar 2.0.1Php Icalendar Php Icalendar 2.0a2Php Icalendar Php Icalendar 2.0bPhp Icalendar Php Icalendar 2.0c
755
VMScore
CVE-2006-1291
publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and previous versions does not require authentication for write access to the calendars directory, which allows remote malicious users to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filenam...
Php Icalendar Php Icalendar 2.0Php Icalendar Php Icalendar 2.0.1Php Icalendar Php Icalendar 2.0a2Php Icalendar Php Icalendar 2.0bPhp Icalendar Php Icalendar 2.0cPhp Icalendar Php Icalendar 2.1Php Icalendar Php Icalendar
505
VMScore
CVE-2006-1292
Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and previous versions allows remote malicious users to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the phpicalendar[cookie_language] and php...
Php Icalendar Php Icalendar 2.0Php Icalendar Php Icalendar 2.0.1Php Icalendar Php Icalendar 2.0a2Php Icalendar Php Icalendar 2.0bPhp Icalendar Php Icalendar 2.0cPhp Icalendar Php Icalendar 2.1Php Icalendar Php Icalendar
755
VMScore
CVE-2008-5840
PHP iCalendar 2.24 and previous versions allows remote malicious users to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.
Phpicalendar Phpicalendar 2.23Phpicalendar Phpicalendar 2.0Phpicalendar Phpicalendar2.0 Alpha TestPhpicalendar Phpicalendar 2.2Phpicalendar Phpicalendar 2.1Phpicalendar Phpicalendar 0.9.5Phpicalendar Phpicalendar 0.9Phpicalendar Phpicalendar 2.22Phpicalendar Phpicalendar 2.21Phpicalendar Phpicalendar 1.1Phpicalendar Phpicalendar 1.0Phpicalendar PhpicalendarPhpicalendar Phpicalendar 2.0.1Phpicalendar Phpicalendar 2.0cPhpicalendar Phpicalendar 0.8Phpicalendar Phpicalendar 0.7
755
VMScore
CVE-2008-5968
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1...
Phpicalendar Phpicalendar 1.1Phpicalendar Phpicalendar 1.0Phpicalendar Phpicalendar 2.22Phpicalendar Phpicalendar 2.23Phpicalendar Phpicalendar 0.8Phpicalendar Phpicalendar 0.7Phpicalendar Phpicalendar 2.2Phpicalendar Phpicalendar 2.21Phpicalendar Phpicalendar 0.9Phpicalendar Phpicalendar 2.0cPhpicalendar Phpicalendar 2.0.1Phpicalendar Phpicalendar 2.1Phpicalendar Phpicalendar 0.9.5Phpicalendar Phpicalendar 2.0Phpicalendar Phpicalendar
755
VMScore
CVE-2008-5967
admin/index.php in PHP iCalendar 2.3.4, 2.24, and previous versions does not require administrative authentication for an addupdate action, which allows remote malicious users to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web ...
Phpicalendar Phpicalendar 0.9Phpicalendar Phpicalendar 0.8Phpicalendar Phpicalendar 0.9.5Phpicalendar Phpicalendar 2.0Phpicalendar Phpicalendar 2.23Phpicalendar Phpicalendar 1.1Phpicalendar Phpicalendar 1.0Phpicalendar Phpicalendar 2.21Phpicalendar Phpicalendar 2.22Phpicalendar Phpicalendar 0.7Phpicalendar Phpicalendar 2.1Phpicalendar Phpicalendar 2.2Phpicalendar Phpicalendar 2.0cPhpicalendar Phpicalendar 2.0.1Phpicalendar Phpicalendar 2.24Phpicalendar Phpicalendar
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook