CVE-2006-0206

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-m58g-r4fm-54mc

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows...

References (18)

• http://attrition.org/pipermail/vim/2006-March/000612.html
• http://evuln.com/vulns/29/exploit.html Exploit
• http://evuln.com/vulns/29/summary.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18450 Exploit, Vendor Advisory
• http://www.osvdb.org/22376
• http://www.securityfocus.com/archive/1/421920
• http://www.securityfocus.com/bid/16229 Exploit
• http://www.vupen.com/english/advisories/2006/0171
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24110
• http://attrition.org/pipermail/vim/2006-March/000612.html
• http://evuln.com/vulns/29/exploit.html Exploit
• http://evuln.com/vulns/29/summary.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18450 Exploit, Vendor Advisory
• http://www.osvdb.org/22376
• http://www.securityfocus.com/archive/1/421920