3 matches found
CVE-2006-2983: Undefined Security Weakness
PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems EPS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
CVE-2006-1252: Undefined Security Weakness
Eval injection vulnerability in cal.php in Light Weight Calendar LWC 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php...
CVE-2006-0206: Undefined Security Weakness
Eval injection vulnerability in Light Weight Calendar LWC 1.0 20040909 and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php...