5

CVE-2006-1292

EPSS 7.3%
Veröffentlicht 19.03.2006 23:02:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the phpicalendar[cookie_language] and phpicalendar[cookie_style] cookies, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included by day.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Php Icalendar ≫ Php Icalendar Version <= 2.2.1

Php Icalendar ≫ Php Icalendar Version2.0

Php Icalendar ≫ Php Icalendar Version2.0.1

Php Icalendar ≫ Php Icalendar Version2.0a2

Php Icalendar ≫ Php Icalendar Version2.0b

Php Icalendar ≫ Php Icalendar Version2.0c

Php Icalendar ≫ Php Icalendar Version2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.3%	0.914

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/19285

http://www.vupen.com/english/advisories/2006/1019

http://www.securityfocus.com/bid/17125

https://www.exploit-db.com/exploits/1585

https://nvd.nist.gov/vuln/detail/CVE-2006-1292

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1292

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1292

EUVD