Unscored severity · published Jan 13, 2006
CVE-2006-0206
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php,…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
Light Weight Calendar · Light Weight Calendar
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0206
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0206
attrition.org
http://attrition.org/pipermail/vim/2006-March/000612.html
Exploit
http://evuln.com/vulns/29/exploit.html
Exploit
http://evuln.com/vulns/29/summary.html
Exploit
http://secunia.com/advisories/18450
www.osvdb.org
http://www.osvdb.org/22376
www.securityfocus.com
http://www.securityfocus.com/archive/1/421920
More from Light Weight Calendar
–
CVE-2006-1252
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php