CVE

Id
14572  
CVE No.
CVE-2005-3366  
Status
Candidate  
Description
PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claimed by the original researcher.  
Phase
Assigned (20051029)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
110872 14572 CVE-2005-3366 BUGTRAQ:20051025 PHP iCalendar CSS  View
110873 14572 CVE-2005-3366 URL:http://marc.info/?l=bugtraq&m=113025930517426&w=2  View
110874 14572 CVE-2005-3366 FULLDISC:20051025 PHP iCalendar CSS  View
110875 14572 CVE-2005-3366 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0512.html  View
110876 14572 CVE-2005-3366 MISC:http://www.ush.it/2005/10/25/php-icalendar-css/  View
110877 14572 CVE-2005-3366 BID:15193  View
110878 14572 CVE-2005-3366 URL:http://www.securityfocus.com/bid/15193  View
110879 14572 CVE-2005-3366 VUPEN:ADV-2005-2204  View
110880 14572 CVE-2005-3366 URL:http://www.vupen.com/english/advisories/2005/2204  View
110881 14572 CVE-2005-3366 SECTRACK:1015102  View
110882 14572 CVE-2005-3366 URL:http://securitytracker.com/id?1015102  View
110883 14572 CVE-2005-3366 SECUNIA:17328  View
110884 14572 CVE-2005-3366 URL:http://secunia.com/advisories/17328/  View
110885 14572 CVE-2005-3366 SREASON:113  View
110886 14572 CVE-2005-3366 URL:http://securityreason.com/securityalert/113  View
110887 14572 CVE-2005-3366 XF:phpicalendar-index-file-include(22864)  View

Related JVN