CVE-2006-1291 | BDVDB-2026-15767 Detail

Description#

publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write access to the calendars directory, which allows remote attackers to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filename containing a .php extension and a trailing null character.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12006-03-19Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.