CVE-2006-6634

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai comextcalendar 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGEXTLANGUAGESDIR parameter to adminevents.php, 2 the mosConfigabsolutepath parameter to...

CVE-2006-3556

The CVE-2006-3556 entry refers to a PHP Remote File Inclusion in ExtCalendar 2.0 by Mohamed Moujami. Connected sources confirm the vulnerability is triggered via the mosConfig_absolute_path parameter in extcalendar.php, allowing a remote attacker to cause arbitrary PHP code execution. Impact is p...