CVE-2006-7055

概要

参考情報

• securityreason.com/securityalert/2290
• sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip · Patch
• sweetphp.com/nuke/index.php
• osvdb.org/25237
• securityfocus.com/archive/1/431866/30/5370/threaded
• securityfocus.com/bid/17618 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/25878
• exploit-db.com/exploits/1753

totalcalendar のその他の脆弱性

• CVE-2009-4974高 7.5Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have …
• CVE-2009-4973高 7.5SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal pa…
• CVE-2009-4928高 7.5PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL i…
• CVE-2009-1406中 6.8Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local file…
• CVE-2007-3515緊急 10.0SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands v…