NVD

Id
58923  
Name
CVE-2006-0183  
Description
Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php, or (2) the edit=footer value, which modifies footer.php. NOTE: this issue might be resultant from the poor authentication as identified by CVE-2006-0182. Since the design of the product allows the administrator to edit the code, perhaps this issue should not be included in CVE, except as a consequence of CVE-2006-0182.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-12  
Modified Date
2011-03-07  
Seq
2006-0183  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302555 58923 CVE-2006-0183 http://evuln.com/vulns/25/summary.html  View
302556 58923 CVE-2006-0183 343  View
302557 58923 CVE-2006-0183 20060112 [eVuln] ACal Authentication Bypass & PHP Code Insertion  View
302558 58923 CVE-2006-0183 ADV-2006-0152  View
302559 58923 CVE-2006-0183 acal-header-footer-code-execute(24107)  View

Related JVN