CVE-2009-1406

概要

参考情報

• secunia.com/advisories/34824 · Vendor Advisory
• securityfocus.com/bid/34634 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/49980
• exploit-db.com/exploits/8503

totalcalendar のその他の脆弱性

• CVE-2009-4974高 7.5Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have …
• CVE-2009-4973高 7.5SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal pa…
• CVE-2009-4928高 7.5PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL i…
• CVE-2007-3515緊急 10.0SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands v…
• CVE-2006-7055中 6.8PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execute arbitrary code via…