CVE

Id
19145  
CVE No.
CVE-2006-3041  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ltw_config[include_dir] parameter. NOTE: CVE disputes this claim, since the $ltw_config[include_dir] variable is defined as a static value in an include file before it is referenced in an include() statement.  
Phase
Assigned (20060615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
170620 19145 CVE-2006-3041 BUGTRAQ:20060613 Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities  View
170621 19145 CVE-2006-3041 URL:http://www.securityfocus.com/archive/1/archive/1/436996/100/0/threaded  View
170622 19145 CVE-2006-3041 VIM:20060615 Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities  View
170623 19145 CVE-2006-3041 URL:http://www.attrition.org/pipermail/vim/2006-June/000866.html  View
170624 19145 CVE-2006-3041 OSVDB:27452  View
170625 19145 CVE-2006-3041 URL:http://www.osvdb.org/27452  View
170626 19145 CVE-2006-3041 SREASON:1099  View

Related JVN