Acal

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Acal records in CISA KEV

No Acal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Calendar Project 2 records LOW Acal 1 record LOW

Records

3 records

TI-2006-02202 CVE-2006-2261 · GHSA-jq7x-wwvc-hrmh

PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers…

LOW 39

PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03325 Published 2006-05-09 No fix listed

TI-2006-00174 CVE-2006-0182 · GHSA-6647-3gg5-89vr

login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication…

LOW 37

login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside".

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01908 Published 2006-01-12 No fix listed

TI-2006-00175 CVE-2006-0183 · GHSA-qwh3-vjxr-qr7x

Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5…

LOW 32

Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php, or (2) the edit=foo…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01323 Published 2006-01-12 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0