php icalendar php icalendar vulnerabilities and exploits

(subscribe to this query)

publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and previous versions does not require authentication for write access to the calendars directory, which allows remote malicious users to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filenam...

Php Icalendar Php Icalendar 2.0 Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.0a2 Php Icalendar Php Icalendar 2.0b Php Icalendar Php Icalendar 2.0c Php Icalendar Php Icalendar 2.1 Php Icalendar Php Icalendar

1 EDB exploit

Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and previous versions allows remote malicious users to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the phpicalendar[cookie_language] and php...

Php Icalendar Php Icalendar 2.0 Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.0a2 Php Icalendar Php Icalendar 2.0b Php Icalendar Php Icalendar 2.0c Php Icalendar Php Icalendar 2.1 Php Icalendar Php Icalendar

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) getdate parameter in (a) day.php, (b) month.php, (c) year.php, (d) week.php, ...

Php Icalendar Php Icalendar Php Icalendar Php Icalendar 1.1 Php Icalendar Php Icalendar 2.2 Beta Php Icalendar Php Icalendar 2.22 Php Icalendar Php Icalendar 2.24

8 EDB exploits

PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 up to and including 2.0.1 allows remote malicious users to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claime...

Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.0a2 Php Icalendar Php Icalendar 2.0b Php Icalendar Php Icalendar 2.0c

Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote malicious users to include arbitrary files via the (1) getdate and possibly other parameters used in the replace_files function in search.php and (2) $file variable as used in the parse...

Php Icalendar Php Icalendar 2.0 Php Icalendar Php Icalendar 2.0.1 Php Icalendar Php Icalendar 2.1

Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the cal parameter.

Php Icalendar Php Icalendar

PHP iCalendar 2.4 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by rss/rss_common.php and certain other files.

Phpicalendar Php Icalendar 2.4

PHP iCalendar 2.24 and previous versions allows remote malicious users to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.

Phpicalendar Phpicalendar 2.23 Phpicalendar Phpicalendar 2.0 Phpicalendar Phpicalendar2.0 Alpha Test Phpicalendar Phpicalendar 2.2 Phpicalendar Phpicalendar 2.1 Phpicalendar Phpicalendar 0.9.5 Phpicalendar Phpicalendar 0.9 Phpicalendar Phpicalendar 2.22 Phpicalendar Phpicalendar 2.21 Phpicalendar Phpicalendar 1.1 Phpicalendar Phpicalendar 1.0 Phpicalendar Phpicalendar Phpicalendar Phpicalendar 2.0.1 Phpicalendar Phpicalendar 2.0c Phpicalendar Phpicalendar 0.8 Phpicalendar Phpicalendar 0.7

1 EDB exploit

admin/index.php in PHP iCalendar 2.3.4, 2.24, and previous versions does not require administrative authentication for an addupdate action, which allows remote malicious users to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web ...

Phpicalendar Phpicalendar 0.9 Phpicalendar Phpicalendar 0.8 Phpicalendar Phpicalendar 0.9.5 Phpicalendar Phpicalendar 2.0 Phpicalendar Phpicalendar 2.23 Phpicalendar Phpicalendar 1.1 Phpicalendar Phpicalendar 1.0 Phpicalendar Phpicalendar 2.21 Phpicalendar Phpicalendar 2.22 Phpicalendar Phpicalendar 0.7 Phpicalendar Phpicalendar 2.1 Phpicalendar Phpicalendar 2.2 Phpicalendar Phpicalendar 2.0c Phpicalendar Phpicalendar 2.0.1 Phpicalendar Phpicalendar 2.24 Phpicalendar Phpicalendar

1 EDB exploit

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1...

Phpicalendar Phpicalendar 1.1 Phpicalendar Phpicalendar 1.0 Phpicalendar Phpicalendar 2.22 Phpicalendar Phpicalendar 2.23 Phpicalendar Phpicalendar 0.8 Phpicalendar Phpicalendar 0.7 Phpicalendar Phpicalendar 2.2 Phpicalendar Phpicalendar 2.21 Phpicalendar Phpicalendar 0.9 Phpicalendar Phpicalendar 2.0c Phpicalendar Phpicalendar 2.0.1 Phpicalendar Phpicalendar 2.1 Phpicalendar Phpicalendar 0.9.5 Phpicalendar Phpicalendar 2.0 Phpicalendar Phpicalendar

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook