Vulnerabilities

TI-2008-05664 CVE-2008-5968 · GHSA-hh54-9j4p-xcwq

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows…

LOW 38

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02918 Published 2009-01-26 No fix listed CWE-22

TI-2008-05663 CVE-2008-5967 · GHSA-5c74-rc32-qc6j

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative…

LOW 39

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar (aka .ics) file with arbitrary content…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03326 Published 2009-01-26 No fix listed CWE-287

TI-2008-05537 CVE-2008-5840 · GHSA-mwmq-3358-vg7q

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by…

LOW 38

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03017 Published 2009-01-05 No fix listed CWE-264

Vulnerabilities

Filters

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows…

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative…

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by…