NVD

Id
61447  
Name
CVE-2006-2762  
Description
PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2011-03-07  
Seq
2006-2762  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317535 61447 CVE-2006-2762 1019  View
317536 61447 CVE-2006-2762 1016179  View
317537 61447 CVE-2006-2762 DSA-1096  View
317538 61447 CVE-2006-2762 20060530 WebCalendar-1.0.3 reading of any files  View
317539 61447 CVE-2006-2762 20060607 Re: WebCalendar-1.0.3 reading of any files  View
317540 61447 CVE-2006-2762 18175  View
317541 61447 CVE-2006-2762 ADV-2006-2067  View

Related JVN