CVE-2006-1922

概要

参考情報

• pridels0.blogspot.com/2006/04/totalcalendar-remote-code-execution.html
• secunia.com/advisories/19730 · Vendor Advisory
• sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip
• osvdb.org/24748
• osvdb.org/24751
• securityfocus.com/bid/17618
• vupen.com/english/advisories/2006/1418

totalcalendar のその他の脆弱性

• CVE-2009-4974高 7.5Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have …
• CVE-2009-4973高 7.5SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal pa…
• CVE-2009-4928高 7.5PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL i…
• CVE-2009-1406中 6.8Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local file…
• CVE-2007-3515緊急 10.0SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands v…