Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

php icalendar php icalendar 2.22 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2006-6824

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) getdate parameter in (a) day.php, (b) month.php, (c) year.php, (d) week.php, ...
Php Icalendar Php Icalendar 2.24Php Icalendar Php Icalendar 2.2 BetaPhp Icalendar Php IcalendarPhp Icalendar Php Icalendar 2.22Php Icalendar Php Icalendar 1.1
NA

CVE-2006-3319

Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the cal parameter.
Php Icalendar Php Icalendar
NA

CVE-2008-5840

PHP iCalendar 2.24 and previous versions allows remote malicious users to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.
Phpicalendar Phpicalendar 2.22Phpicalendar Phpicalendar 2.21Phpicalendar Phpicalendar 2.23Phpicalendar PhpicalendarPhpicalendar Phpicalendar 2.2Phpicalendar Phpicalendar 0.9Phpicalendar Phpicalendar 2.0.1Phpicalendar Phpicalendar 1.1Phpicalendar Phpicalendar 0.8Phpicalendar Phpicalendar 2.1Phpicalendar Phpicalendar 2.0Phpicalendar Phpicalendar 1.0Phpicalendar Phpicalendar 2.0cPhpicalendar Phpicalendar2.0 Alpha TestPhpicalendar Phpicalendar 0.7Phpicalendar Phpicalendar 0.9.5
NA

CVE-2008-5968

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1...
Phpicalendar Phpicalendar 2.22Phpicalendar Phpicalendar 2.21Phpicalendar Phpicalendar 2.23Phpicalendar PhpicalendarPhpicalendar Phpicalendar 2.2Phpicalendar Phpicalendar 0.9Phpicalendar Phpicalendar 2.0.1Phpicalendar Phpicalendar 1.1Phpicalendar Phpicalendar 0.8Phpicalendar Phpicalendar 2.1Phpicalendar Phpicalendar 2.0Phpicalendar Phpicalendar 1.0Phpicalendar Phpicalendar 2.0cPhpicalendar Phpicalendar 0.7Phpicalendar Phpicalendar 0.9.5
NA

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and previous versions does not require administrative authentication for an addupdate action, which allows remote malicious users to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web ...
Phpicalendar Phpicalendar 2.22Phpicalendar Phpicalendar 2.21Phpicalendar Phpicalendar 2.23Phpicalendar Phpicalendar 2.2Phpicalendar Phpicalendar 0.9Phpicalendar Phpicalendar 2.0.1Phpicalendar Phpicalendar 1.1Phpicalendar Phpicalendar 0.8Phpicalendar Phpicalendar 2.24Phpicalendar Phpicalendar 2.1Phpicalendar PhpicalendarPhpicalendar Phpicalendar 2.0Phpicalendar Phpicalendar 1.0Phpicalendar Phpicalendar 2.0cPhpicalendar Phpicalendar 0.7Phpicalendar Phpicalendar 0.9.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCPCVE-2024-4577CVE-2024-2695CVE-2024-31870injectionCVE-2024-3813arbitrary codeCVE-2024-27801CVE-2024-30120
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook