NVD

Id
62789  
Name
CVE-2006-4135  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter. NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to a constant value in the beginning of the script. CVE concurs that the initial report is invalid.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-14  
Modified Date
2008-09-05  
Seq
2006-4135  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326413 62789 CVE-2006-4135 1016694  View
326414 62789 CVE-2006-4135 20060814 Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability  View
326415 62789 CVE-2006-4135 20060813 Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability  View
326416 62789 CVE-2006-4135 20060812 Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability  View
326417 62789 CVE-2006-4135 20060814 Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability  View
326418 62789 CVE-2006-4135 20060815 Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability  View
326419 62789 CVE-2006-4135 calendarix-calconfig-file-include(28349)  View

Related JVN