PT-2005-2821 · Calendarix · Calendarix Advanced

Publicado 2005-06-07 · Atualizado 2008-09-05 · CVE-2005-1864

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Calendarix Advanced version 1.5

Description A remote file inclusion issue allows attackers to execute arbitrary PHP code. The issue is related to the calpath parameter in the cal admintop.php file.

Recommendations For Calendarix Advanced version 1.5, consider restricting access to the cal admintop.php file until a patch is available. As a temporary workaround, avoid using the calpath parameter in the affected file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1864

Produtos afetados

Calendarix Advanced

Referências · 4

• 🔥 http://securitytracker.com/alerts/2005/May/1014083.html · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1864 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1864 · Nota de Segurança