Lucene search

K
cve[email protected]CVE-2006-1252
HistoryMar 19, 2006 - 1:02 a.m.

CVE-2006-1252

2006-03-1901:02:00
web.nvd.nist.gov
24
cve-2006-1252
eval injection
lwc
remote attack
arbitrary php code
vulnerability
nvd

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.1%

Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.

Affected configurations

NVD
Node
light_weight_calendarlight_weight_calendarMatch1.0

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.1%

Related for CVE-2006-1252