high7.5Public exploit code
CVE-2007-6554
Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and execute arbitrary local files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions2007-12-25 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) register.php, (3) login.php, or (4) statistics.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| George Lewe | Teamcal Pro | through 3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/39827
- http://osvdb.org/39828
- http://osvdb.org/39829
- http://osvdb.org/39830
- http://www.securityfocus.com/bid/27022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39212
- https://www.exploit-db.com/exploits/4785
- http://osvdb.org/39827
- http://osvdb.org/39828
- http://osvdb.org/39829
- http://osvdb.org/39830
- http://www.securityfocus.com/bid/27022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39212
- https://www.exploit-db.com/exploits/4785