high7.5Public exploit code
CVE-2006-6812
Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PHP code via a URL in the cal_dir paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- myPHPCalendar 10192000b - 'cal_dir' Remote File Inclusion2006-12-26 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PHP code via a URL in the cal_dir parameter to (1) admin.php, (2) contacts.php, or (3) convert-date.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myphpcalendar | Myphpcalendar | Version 10.1 |