CVE-2006-0648

Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the 1 getdate and possibly other parameters used in the replacefiles function in search.php and 2 $file variable as used in the parse function in...

CVE-2006-0648

PHP iCalendar 2.0.1, 2.1, and 2.2 contain directory traversal/remote file inclusion vulnerabilities. The issues arise from input validation failures in search.php (getdate) and template.php (file) that allow an attacker to include arbitrary files and, if PHP register_globals is enabled, may enabl...

CVE-2006-0648

Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the 1 getdate and possibly other parameters used in the replacefiles function in search.php and 2 $file variable as used in the parse function in...

PHP iCalendar Multiple Script Remote File Inclusion

The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The installed version of PHP iCalendar fails to validate user input to the 'getdate' parameter of the 'search.php' script as well as the 'file' parameter of 'template.php' script. Provided...

[eVuln] PHP iCalendar File Inclusion Vulnerability

New eVuln Advisory: PHP iCalendar File Inclusion Vulnerability http://evuln.com/vulns/70/summary.html --------------------Summary---------------- eVuln ID: EV0070 Software: PHP iCalendar Sowtware's Web Site: http://phpicalendar.net/ Versions: 2.0.1 2.1 2.2 Critical Level: Dangerous Type: File...

CVE-2005-3366

PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting XSS issue as claimed by the original researcher...

PHP iCalendar Cross Site Scripting

PHP iCalendar CSS Name Cross-Site-Scripting Vulnerabilities in PHP iCalendar Systems Affected PHP iCalendar 2.0a2, 2.0b, 2.0c, 2.0.1 Severity Medium Risk Vendor http://www.phpicalendar.net Advisory http://www.ush.it/2005/10/25/php-icalendar-css/ Additional it...

PHP iCalendar index.php phpicalendar Parameter Remote File Inclusion

The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The version of PHP iCalendar installed on the remote host fails to sanitize the 'phpicalendar' cookie before using it in 'index.php' to include PHP code from a separate file. By leveraging...

[Full-disclosure] PHP iCalendar CSS

PHP iCalendar CSS Name Cross-Site-Scripting Vulnerabilities in PHP iCalendar Systems Affected PHP iCalendar 2.0a2, 2.0b, 2.0c, 2.0.1 Severity Medium Risk Vendor http://www.phpicalendar.net Advisory http://www.ush.it/2005/10/25/php-icalendar-css/ Additional it...