| Package | Affected versions | Patched versions |
|---|---|---|
| totalcalendar | = 2.0= 2.1= 2.2 |
PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free