Vulnerabilities > Acal > Calendar Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-01-12 | CVE-2006-0183 | Remote Security vulnerability in Acal Calendar Project 2.2.5 Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php, or (2) the edit=footer value, which modifies footer.php. | 6.5 |
| 2006-01-12 | CVE-2006-0182 | Security Bypass vulnerability in Acal Calendar Project 2.2.5 login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside". | 7.5 |