PHP iCalendar Version Detection

This script detects the installed version of PHP iCalendar. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple Vulnerabilities in PHP iCalendar

PHP iCalendar is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpicalendar:phpicalendar";...

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

CVE-2008-5968

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

Directory traversal

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

Directory traversal

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

CVE-2008-5968

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

CVE-2008-5968

CVE-2008-5968 affects PHP iCalendar 2.24 and earlier. It is a directory traversal vulnerability in print.php that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter of a phpicalendar_* cookie. This is a different vector than CV...

CVE-2008-5967

CVE-2008-5967 affects PHP iCalendar up to version 2.x. The issue is that admin/index.php does not require administrative authentication for an addupdate action, enabling remote attackers to upload a calendar (.ics) file with arbitrary content to the calendars/ directory outside the web root. This...

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

CVE-2008-5968

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

PHP iCalendar Cookie处理绕过认证漏洞

BUGTRAQ ID: 31320 CVECAN ID: CVE-2008-5840 PHP iCalendar是基于PHP的iCal文件查看器/解析器，用于在浏览器中显示日历。 PHP iCalendar的index.php脚本中没有执行充分地安全限制，远程攻击者可以使用包含有URL编码.ICS文件的特制cookie（将phpicalendar和phpicalendarlogin设置为1）绕过认证限制上传恶意文件。 PHP iCalendar 2.24 厂商补丁： PHP iCalendar -------------...

CVE-2008-5840

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...

Authentication flaw

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...

CVE-2008-5840

CVE-2008-5840 affects PHP iCalendar 2.24 and earlier. The index.php script lacks sufficient access controls, allowing remote attackers to bypass authentication by setting cookies phpicalendar and phpicalendar_login to 1, enabling potentially malicious file uploads. Reported impact includes partia...

CVE-2008-5840

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...

PHP iCalendar < 2.25 Administrative Bypass

Binary data 4690.prm...

PHP iCalendar 2.24 - Insecure Cookie Handling

PHP iCalendar 2.24 - Insecure Cookie Handling + PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com...

phpical-cookie.txt

PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/";...

PHP iCalendar &lt;= 2.24 Insecure Cookie Handling Vulnerability

No description provided by source. + PHP iCalendar = 2.24 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "phpicalendarlogin=1; path=/"; javascript:document.cookie = "phpicalendar=1; path=/"; milw0rm.com 2008-09-22...