CVE-2006-0206

Description

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24110

http://www.vupen.com/english/advisories/2006/0171

http://www.securityfocus.com/archive/1/421920

http://www.osvdb.org/22376

http://attrition.org/pipermail/vim/2006-March/000612.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS