NVD

Id
59379  
Name
CVE-2006-0648  
Description
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the (1) getdate and possibly other parameters used in the replace_files function in search.php and (2) $file variable as used in the parse function in functions/template.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-13  
Modified Date
2011-03-07  
Seq
2006-0648  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305288 59379 CVE-2006-0648 http://evuln.com/vulns/70/summary.html  View
305289 59379 CVE-2006-0648 http://phpicalendar.net/forums/viewtopic.php?t=396  View
305290 59379 CVE-2006-0648 420  View
305291 59379 CVE-2006-0648 20060208 [eVuln] PHP iCalendar File Inclusion Vulnerability  View
305292 59379 CVE-2006-0648 16557  View
305293 59379 CVE-2006-0648 ADV-2006-0493  View
305294 59379 CVE-2006-0648 phpicalendar-template-search-file-include(24591)  View

Related JVN