CVE-2006-5289: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the calpath parameter to 1 modules/Calendar/admin/update.php, 2 modules/Calendar/admin/scheme.php, or 3 modules/Calendar/calendar.php...

Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability

--------------------------------------------------------------------------------------- Calendarix 0.7 calpath Remote File Inclusion --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/08/11 HomePage : http://www.sh3ll.ir Contact :...

PT-2006-4976 · Calendarix · Calendarix

Name of the Vulnerable Software and Affected Versions: Calendarix versions prior to 0.7.20060401 Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the calpath parameter. However, this issue has been disputed by a third party, who claims that th...

CVE-2006-4135: Undefined Security Weakness

PHP remote file inclusion vulnerability in calconfig.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter. NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to...

CVE-2005-1864: Undefined Security Weakness

PHP remote file inclusion vulnerability in caladmintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter...