CVE-2009-4928

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir…

published July 9, 2010

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01316 · 70.5th percentile
Published
2010-07-09T17:00Z
EPSS history
Timeline
  • 09 JUL 17:00Z
    PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir…
    cvelistv5