Vulnerabilities > CVE-2006-3684 - Remote File Include vulnerability in Softcomplex PHP Event Calendar 1.4

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
softcomplex
NVD
Published: 2006-07-21
Updated: 2018-10-18

Summary

PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call.

Vulnerable Configurations

Part Description Count
Application
Softcomplex
1

References