Vulnerability in Light Weight Calendar
CVE-2006-1252
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
EPSS: 0.026 (83.4th percentile) — read the EPSS interpretation.
Affected products
- Light_weight_calendar — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_VIM)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)