CVE-2006-0648 | BDVDB-2026-15092 Detail
Description#
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the (1) getdate and possibly other parameters used in the replace_files function in search.php and (2) $file variable as used in the parse function in functions/template.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://evuln.com/vulns/70/summary.html
- http://phpicalendar.net/forums/viewtopic.php?t=396
- http://www.securityfocus.com/archive/1/424424/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0493
- http://www.securityfocus.com/bid/16557
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24591
- http://securityreason.com/securityalert/420
- http://secunia.com/advisories/18778
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.