CVE-2008-5968

2009-01-2620:30:00

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.014

Percentile

86.4%

JSON

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1292.

Affected configurations

Nvd

Node

phpicalendarphpicalendarRange≤2.24

phpicalendarphpicalendarMatch0.7

phpicalendarphpicalendarMatch0.8

phpicalendarphpicalendarMatch0.9

phpicalendarphpicalendarMatch0.9.5

phpicalendarphpicalendarMatch1.0

phpicalendarphpicalendarMatch1.1

phpicalendarphpicalendarMatch2.0beta

phpicalendarphpicalendarMatch2.0.1

phpicalendarphpicalendarMatch2.0c

phpicalendarphpicalendarMatch2.1

phpicalendarphpicalendarMatch2.2

phpicalendarphpicalendarMatch2.21

phpicalendarphpicalendarMatch2.22

phpicalendarphpicalendarMatch2.23

phpicalendarphpicalendarMatch2.23rc1

VendorProductVersionCPE
phpicalendarphpicalendar*cpe:2.3:a:phpicalendar:phpicalendar:*:*:*:*:*:*:*:*
phpicalendarphpicalendar0.7cpe:2.3:a:phpicalendar:phpicalendar:0.7:*:*:*:*:*:*:*
phpicalendarphpicalendar0.8cpe:2.3:a:phpicalendar:phpicalendar:0.8:*:*:*:*:*:*:*
phpicalendarphpicalendar0.9cpe:2.3:a:phpicalendar:phpicalendar:0.9:*:*:*:*:*:*:*
phpicalendarphpicalendar0.9.5cpe:2.3:a:phpicalendar:phpicalendar:0.9.5:*:*:*:*:*:*:*
phpicalendarphpicalendar1.0cpe:2.3:a:phpicalendar:phpicalendar:1.0:*:*:*:*:*:*:*
phpicalendarphpicalendar1.1cpe:2.3:a:phpicalendar:phpicalendar:1.1:*:*:*:*:*:*:*
phpicalendarphpicalendar2.0cpe:2.3:a:phpicalendar:phpicalendar:2.0:beta:*:*:*:*:*:*
phpicalendarphpicalendar2.0.1cpe:2.3:a:phpicalendar:phpicalendar:2.0.1:*:*:*:*:*:*:*
phpicalendarphpicalendar2.0ccpe:2.3:a:phpicalendar:phpicalendar:2.0c:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpicalendar	phpicalendar	*	cpe:2.3:a:phpicalendar:phpicalendar::::::::
phpicalendar	phpicalendar	0.7	cpe:2.3:a:phpicalendar:phpicalendar:0.7:::::::*
phpicalendar	phpicalendar	0.8	cpe:2.3:a:phpicalendar:phpicalendar:0.8:::::::*
phpicalendar	phpicalendar	0.9	cpe:2.3:a:phpicalendar:phpicalendar:0.9:::::::*
phpicalendar	phpicalendar	0.9.5	cpe:2.3:a:phpicalendar:phpicalendar:0.9.5:::::::*
phpicalendar	phpicalendar	1.0	cpe:2.3:a:phpicalendar:phpicalendar:1.0:::::::*
phpicalendar	phpicalendar	1.1	cpe:2.3:a:phpicalendar:phpicalendar:1.1:::::::*
phpicalendar	phpicalendar	2.0	cpe:2.3:a:phpicalendar:phpicalendar:2.0:beta::::::
phpicalendar	phpicalendar	2.0.1	cpe:2.3:a:phpicalendar:phpicalendar:2.0.1:::::::*
phpicalendar	phpicalendar	2.0c	cpe:2.3:a:phpicalendar:phpicalendar:2.0c:::::::*