CVE-2006-1252
published 2006-03-19CVE-2006-1252: Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to…
PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.55%
83.1th percentile
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| light_weight_calendar | light_weight_calendar | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6wgx-3pp9-f77g: Eval injection vulnerability in cal
ghsa_unreviewed·2022-05-01
CVE-2006-1252 [HIGH] GHSA-6wgx-3pp9-f77g: Eval injection vulnerability in cal
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
GHSA
XWiki Remote Code Execution
ghsa·2022-05-01
CVE-2006-7223 [MEDIUM] XWiki Remote Code Execution
XWiki Remote Code Execution
PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights, modifying this document to contain a script, and previewing without saving the document.
No detection rules found.
No writeups or analysis indexed.
2006-03-19
Published