Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-1423
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1423

2004-12-3105:00:00
CWE-94
[email protected]
web.nvd.nist.gov
2

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.184

Percentile

96.2%

JSON

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php.

Affected configurations

Nvd
Node
php-calendarphp-calendarRange≤0.10
OR
php-calendarphp-calendarMatch0.1
OR
php-calendarphp-calendarMatch0.2
OR
php-calendarphp-calendarMatch0.3
OR
php-calendarphp-calendarMatch0.4
OR
php-calendarphp-calendarMatch0.5
OR
php-calendarphp-calendarMatch0.6
OR
php-calendarphp-calendarMatch0.7
OR
php-calendarphp-calendarMatch0.8
OR
php-calendarphp-calendarMatch0.9
OR
php-calendarphp-calendarMatch0.9.1
VendorProductVersionCPE
php-calendarphp-calendar*cpe:2.3:a:php-calendar:php-calendar:*:*:*:*:*:*:*:*
php-calendarphp-calendar0.1cpe:2.3:a:php-calendar:php-calendar:0.1:*:*:*:*:*:*:*
php-calendarphp-calendar0.2cpe:2.3:a:php-calendar:php-calendar:0.2:*:*:*:*:*:*:*
php-calendarphp-calendar0.3cpe:2.3:a:php-calendar:php-calendar:0.3:*:*:*:*:*:*:*
php-calendarphp-calendar0.4cpe:2.3:a:php-calendar:php-calendar:0.4:*:*:*:*:*:*:*
php-calendarphp-calendar0.5cpe:2.3:a:php-calendar:php-calendar:0.5:*:*:*:*:*:*:*
php-calendarphp-calendar0.6cpe:2.3:a:php-calendar:php-calendar:0.6:*:*:*:*:*:*:*
php-calendarphp-calendar0.7cpe:2.3:a:php-calendar:php-calendar:0.7:*:*:*:*:*:*:*
php-calendarphp-calendar0.8cpe:2.3:a:php-calendar:php-calendar:0.8:*:*:*:*:*:*:*
php-calendarphp-calendar0.9cpe:2.3:a:php-calendar:php-calendar:0.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

Related

nessus 1
exploitpack 1
exploitdb 1
cve 1
cvelist 1
nessus
nessus
PHP-Calendar Multiple Script phpc_root_path Parameter Remote File Inclusion
2004-12-29 00:00:00
exploitpack
exploitpack
PHP-Calendar 0.10.1 - Arbitrary File Inclusion
2014-12-29 00:00:00
exploitdb
exploitdb
PHP-Calendar < 0.10.1 - Arbitrary File Inclusion
2014-12-29 00:00:00
cve
cve
CVE-2004-1423
2005-02-12 05:00:00
cvelist
cvelist
CVE-2004-1423
2005-02-12 05:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.184

Percentile

96.2%

JSON
Related for NVD:CVE-2004-1423
nessus1exploitpack1exploitdb1cve1cvelist1