php icalendar php icalendar 2.1 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and previous versions allows remote malicious users to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the phpicalendar[cookie_language] and php...

Php Icalendar Php Icalendar 2.0 Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.0a2 Php Icalendar Php Icalendar 2.0b Php Icalendar Php Icalendar 2.0c Php Icalendar Php Icalendar 2.1 Php Icalendar Php Icalendar

1 EDB exploit

publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and previous versions does not require authentication for write access to the calendars directory, which allows remote malicious users to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filenam...

Php Icalendar Php Icalendar 2.0 Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.0a2 Php Icalendar Php Icalendar 2.0b Php Icalendar Php Icalendar 2.0c Php Icalendar Php Icalendar 2.1 Php Icalendar Php Icalendar

1 EDB exploit

Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote malicious users to include arbitrary files via the (1) getdate and possibly other parameters used in the replace_files function in search.php and (2) $file variable as used in the parse...

Php Icalendar Php Icalendar 2.0 Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.1

PHP iCalendar 2.24 and previous versions allows remote malicious users to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.

Phpicalendar Phpicalendar 2.23 Phpicalendar Phpicalendar 2.0 Phpicalendar Phpicalendar2.0 Alpha Test Phpicalendar Phpicalendar 2.2 Phpicalendar Phpicalendar 2.1 Phpicalendar Phpicalendar 0.9.5 Phpicalendar Phpicalendar 0.9 Phpicalendar Phpicalendar 2.22 Phpicalendar Phpicalendar 2.21 Phpicalendar Phpicalendar 1.1 Phpicalendar Phpicalendar 1.0 Phpicalendar Phpicalendar Phpicalendar Phpicalendar 2.0.1 Phpicalendar Phpicalendar 2.0c Phpicalendar Phpicalendar 0.8 Phpicalendar Phpicalendar 0.7

1 EDB exploit

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1...

Phpicalendar Phpicalendar 1.1 Phpicalendar Phpicalendar 1.0 Phpicalendar Phpicalendar 2.22 Phpicalendar Phpicalendar 2.23 Phpicalendar Phpicalendar 0.8 Phpicalendar Phpicalendar 0.7 Phpicalendar Phpicalendar 2.2 Phpicalendar Phpicalendar 2.21 Phpicalendar Phpicalendar 0.9 Phpicalendar Phpicalendar 2.0c Phpicalendar Phpicalendar 2.0.1 Phpicalendar Phpicalendar 2.1 Phpicalendar Phpicalendar 0.9.5 Phpicalendar Phpicalendar 2.0 Phpicalendar Phpicalendar

1 EDB exploit

admin/index.php in PHP iCalendar 2.3.4, 2.24, and previous versions does not require administrative authentication for an addupdate action, which allows remote malicious users to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web ...

Phpicalendar Phpicalendar 0.9 Phpicalendar Phpicalendar 0.8 Phpicalendar Phpicalendar 0.9.5 Phpicalendar Phpicalendar 2.0 Phpicalendar Phpicalendar 2.23 Phpicalendar Phpicalendar 1.1 Phpicalendar Phpicalendar 1.0 Phpicalendar Phpicalendar 2.21 Phpicalendar Phpicalendar 2.22 Phpicalendar Phpicalendar 0.7 Phpicalendar Phpicalendar 2.1 Phpicalendar Phpicalendar 2.2 Phpicalendar Phpicalendar 2.0c Phpicalendar Phpicalendar 2.0.1 Phpicalendar Phpicalendar 2.24 Phpicalendar Phpicalendar

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook