Lucene search
HistoryJun 24, 2008 - 7:41 p.m.
CVE-2008-2836
cve-2008-2836
php
remote file inclusion
webcalendar
security vulnerability
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.052 Low
EPSS
Percentile
93.0%
PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483.
| CPE | Name | Operator | Version |
|---|---|---|---|
| k5n:webcalendar | k5n webcalendar | eq | 1.0.4 |
Related
cvelist
cvelist
CVE-2008-2836
2008-06-24 19:00:00
CVE-2007-1483
2007-03-16 21:00:00
prion
prion
Remote file inclusion
2008-06-24 19:41:00
Remote file inclusion
2007-03-16 21:19:00
ubuntucve
ubuntucve
CVE-2008-2836
2008-06-24 00:00:00
CVE-2007-1483
2007-03-16 00:00:00
cve
cve
CVE-2007-1483
2007-03-16 21:19:00
securityvulns
securityvulns
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.052 Low
EPSS
Percentile
93.0%
Related for CVE-2008-2836