CVE-2006-0648

PHP iCalendar 2.0.1, 2.1, and 2.2 contain directory traversal/remote file inclusion vulnerabilities. The issues arise from input validation failures in search.php (getdate) and template.php (file) that allow an attacker to include arbitrary files and, if PHP register_globals is enabled, may enabl...