NVD

Id
4487  
Name
CVE-2008-4673  
Description
PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the (1) path[docroot] and (2) component parameters.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-22  
Modified Date
2011-03-07  
Seq
2008-4673  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28203 4487 CVE-2008-4673 4461  View
28204 4487 CVE-2008-4673 6623  View
28205 4487 CVE-2008-4673 31471  View
28206 4487 CVE-2008-4673 ADV-2008-2701  View
28207 4487 CVE-2008-4673 eventscalendar-headersetup-file-include(45500)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51034 JVNDB-2008-006344 WebBiscuits Software Events Calendar の panel/common/theme/default/header_setup.php における PHP リモートファイルインクルージョンの脆弱性 WebBiscuits Software Events Calendar の panel/common/theme/default/header_setup.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-4673 34786 CVE-2008-4673 4487 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006344.html 2008-10-22 2012-12-20 View