CVE

Id
36084  
CVE No.
CVE-2008-5967  
Status
Candidate  
Description
admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web root.  
Phase
Assigned (20090126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395893 36084 CVE-2008-5967 MILW0RM:6519  View
395894 36084 CVE-2008-5967 URL:http://milw0rm.com/exploits/6519  View
395895 36084 CVE-2008-5967 SECUNIA:31944  View
395896 36084 CVE-2008-5967 URL:http://secunia.com/advisories/31944  View
395897 36084 CVE-2008-5967 XF:phpicalendar-index-file-upload(48323)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43075 JVNDB-2009-004082 i-Net Solution Orkut Clone におけるクロスサイトスクリプティングの脆弱性 i-Net Solution Orkut Clone の profile_social.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-5971 36084 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004082.html  View