high7.5Public exploit code
CVE-2006-1252
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to inde…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Light Weight Calendar 1.x - 'date' Remote Code Execution2006-03-09 · webapps · php · Verified
Impact
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Light Weight Calendar | Light Weight Calendar | Version 1.0 |