CVE-2007-6696

概要

参考情報

• osvdb.org/41274
• osvdb.org/41275
• osvdb.org/41276
• digitrustgroup.com/advisories/web-application-security-webcalendar.html · Exploit
• securityfocus.com/bid/27461 · Exploit

webcalendar のその他の脆弱性

• CVE-2007-1343高 7.5includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allow…
• CVE-2006-6669中 6.8Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary …
• CVE-2006-2762中 6.4PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code vi…
• CVE-2006-2247中 5.0WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers…
• CVE-2006-1537中 5.0Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) includes/index.php, …