CVE-2006-2762 - PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call

Back Back to CVE browser

MEDIUM

PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call

Published Jun 2, 2006

6.4

MEDIUM

CVSS 2.0

EPSS 2.17%

Description

PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://secunia.com/advisories/20367
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/20542
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1019
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016179
vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2006/dsa-1096
vendor-advisoryx_refsource_DEBIAN
http://www.osvdb.org/25842
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/435379
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/436263/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18175
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2067
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://secunia.com/advisories/20367		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/20542		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1019		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016179		vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2006/dsa-1096		vendor-advisoryx_refsource_DEBIAN
http://www.osvdb.org/25842		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/435379		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/436263/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18175		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2067		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 2, 2006

Updated Aug 7, 2024

Reserved Jun 1, 2006

Link CVE-2006-2762

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2762

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2762