| Package | Affected versions | Patched versions |
|---|---|---|
| php-calendar | = 0.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.7= 0.8= 0.9= 0.9.1≤ 0.10 |
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free