Vulnerabilities > CVE-2007-1110 - Local File Include vulnerability in Activecalendar 1.2.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
activecalendar
exploit available
NVD
Published: 2007-02-26
Updated: 2018-10-16

Summary

Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.

Vulnerable Configurations

Part Description Count
Application
Activecalendar
1

Exploit-Db

descriptionActive Calendar 1.2 ShowCode.PHP Local File Include Vulnerability. CVE-2007-1110 . Webapps exploit for php platform
idEDB-ID:29645
last seen2016-02-03
modified2007-02-24
published2007-02-24
reporterSimon Bonnard
sourcehttps://www.exploit-db.com/download/29645/
titleActive Calendar 1.2 ShowCode.PHP Local File Include Vulnerability

References