|
|
CVE Reference: CVE-2006-0183 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-0183 |
|
|
Description: Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php, or (2) the edit=footer value, which modifies footer.php. NOTE: this issue might be resultant from the poor authentication as identified by CVE-2006-0182. Since the design of the product allows the administrator to edit the code, perhaps this issue should not be included in CVE, except as a consequence of CVE-2006-0182. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/24107 SREASON http://securityreason.com/securityalert/343 SAID Secunia Advisory: SA18432 OSVDB 22345 MISC http://evuln.com/vulns/25/summary.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/421744/100/0/threaded |
|
| Return to the previous page. |
