high7.5
CVE-2005-2717
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly v…
Impact
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webcalendar | Webcalendar | Version 1.0.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16528
- http://secunia.com/advisories/16675
- http://securitytracker.com/id?1014849
- http://sourceforge.net/project/shownotes.php?release_id=350336
- http://www.debian.org/security/2005/dsa-799
- http://www.securityfocus.com/bid/14651
- http://www.vupen.com/english/advisories/2005/1513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22136
- http://secunia.com/advisories/16528
- http://secunia.com/advisories/16675
- http://securitytracker.com/id?1014849
- http://sourceforge.net/project/shownotes.php?release_id=350336
- http://www.debian.org/security/2005/dsa-799
- http://www.securityfocus.com/bid/14651
- http://www.vupen.com/english/advisories/2005/1513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22136