CVE

Id
24840  
CVE No.
CVE-2007-1483  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to (1) login.php, (2) get_reminders.php, or (3) get_events.php.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246086 24840 CVE-2007-1483 BUGTRAQ:20070315 WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include  View
246087 24840 CVE-2007-1483 URL:http://www.securityfocus.com/archive/1/archive/1/462957/100/0/threaded  View
246088 24840 CVE-2007-1483 BUGTRAQ:20070320 Re: WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include  View
246089 24840 CVE-2007-1483 URL:http://www.securityfocus.com/archive/1/463288  View
246090 24840 CVE-2007-1483 MILW0RM:3492  View
246091 24840 CVE-2007-1483 URL:http://www.milw0rm.com/exploits/3492  View
246092 24840 CVE-2007-1483 MLIST:[webcalendar-announce] 20070304 Announce: Release 1.0.5 (security patch)  View
246093 24840 CVE-2007-1483 URL:http://sourceforge.net/mailarchive/forum.php?thread_name=45EAF486.9080902%40k5n.us&forum_name=webcalendar-announce  View
246094 24840 CVE-2007-1483 BID:23054  View
246095 24840 CVE-2007-1483 URL:http://www.securityfocus.com/bid/23054  View
246096 24840 CVE-2007-1483 SREASON:2425  View
246097 24840 CVE-2007-1483 URL:http://securityreason.com/securityalert/2425  View
246098 24840 CVE-2007-1483 XF:webcalendar-multiple-file-include(33008)  View

Related JVN