NVD

Id
69028  
Name
CVE-2005-3366  
Description
PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claimed by the original researcher.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-10-30  
Modified Date
2017-07-10  
Seq
2005-3366  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
356857 69028 CVE-2005-3366 20051025 PHP iCalendar CSS  View
356858 69028 CVE-2005-3366 20051025 PHP iCalendar CSS  View
356859 69028 CVE-2005-3366 113  View
356860 69028 CVE-2005-3366 1015102  View
356861 69028 CVE-2005-3366 15193  View
356862 69028 CVE-2005-3366 http://www.ush.it/2005/10/25/php-icalendar-css/  View
356863 69028 CVE-2005-3366 ADV-2005-2204  View
356864 69028 CVE-2005-3366 phpicalendar-index-file-include(22864)  View

Related JVN