CVEvulnerability
CVE-2006-0206
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.
Affected configurations
• light weight calendar light weight calendar 1.0
References
- http://attrition.org/pipermail/vim/2006-March/000612.html attrition.org
- http://evuln.com/vulns/29/exploit.html Exploit
- http://evuln.com/vulns/29/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18450 Exploit, Vendor Advisory
- http://www.osvdb.org/22376 www.osvdb.org
- http://www.securityfocus.com/archive/1/421920 www.securityfocus.com
- http://www.securityfocus.com/bid/16229 Exploit
- http://www.vupen.com/english/advisories/2006/0171 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24110 exchange.xforce.ibmcloud.com
- http://attrition.org/pipermail/vim/2006-March/000612.html attrition.org
- http://evuln.com/vulns/29/exploit.html Exploit
- http://evuln.com/vulns/29/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18450 Exploit, Vendor Advisory
- http://www.osvdb.org/22376 www.osvdb.org
- http://www.securityfocus.com/archive/1/421920 www.securityfocus.com
- http://www.securityfocus.com/bid/16229 Exploit
- http://www.vupen.com/english/advisories/2006/0171 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24110 exchange.xforce.ibmcloud.com