CVE-2006-4135

PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via…

published August 14, 2006

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter. NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to a constant value in the beginning of the script. CVE concurs that the initial report is invalid

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01942 · 80.0th percentile
Published
2006-08-14T23:00Z
EPSS history
Timeline
  • 14 AUG 23:00Z
    PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via…
    cvelistv5