Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote malicious users to execute arbitrary PHP code via a URL in the cal_dir parameter to (1) admin.php, (2) contacts.php, or (3) convert-date.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
myphpcalendar myphpcalendar 10.1 |