| Package | Affected versions | Patched versions |
|---|---|---|
| php icalendar | = 2.0.1= 2.0a2= 2.0b= 2.0c |
PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claimed by the original researcher.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free