Totalcalendar Security Vulnerabilities and Issues — Totalcalendar CVE List

Lucene search

SweetphpTotalcalendar

3 matches found

CVE•added 2007/02/24 12:28 a.m.•43 views

CVE-2006-7055

PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execute arbitrary code via a URL in the inc_dir parameter, a different vector than CVE-2006-1922.

6.8CVSS7.6AI score0.15806EPSS

CVE•added 2009/04/24 2:30 p.m.•42 views

CVE-2009-1406

Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the include parameter.

6.8CVSS7.3AI score0.01488EPSS

Web

CVE•added 2006/04/20 6:6 p.m.•41 views

CVE-2006-1922

PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter.

6.4CVSS7.4AI score0.11677EPSS