CVE-2006-6669

Description

References

• secunia.com/advisories/23341 · Vendor Advisory
• secunia.com/advisories/24974
• securityreason.com/securityalert/2054
• debian.org/security/2007/dsa-1279
• securityfocus.com/archive/1/454810/100/0/threaded
• vupen.com/english/advisories/2006/5067

Weitere Schwachstellen in webcalendar

• CVE-2007-6696NIEDRIG 2.1Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (…
• CVE-2007-1343HOCH 7.5includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allow…
• CVE-2006-2762MITTEL 6.4PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code vi…
• CVE-2006-2247MITTEL 5.0WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers…
• CVE-2006-1537MITTEL 5.0Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) includes/index.php, …