PT-2007-1334

CVE-2006-7055

Published

2007-02-24

Updated

2018-10-16

CVSS 2.0

6.8

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TotalCalendar versions 2.30 and earlier

Description A remote file inclusion issue in index.php allows remote attackers to execute arbitrary code via a URL in the inc dir parameter.

Recommendations For TotalCalendar versions 2.30 and earlier, update to a version later than 2.30 to resolve the issue.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾