CVE-2005-1864

PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-06-09

Last modified

2024-08-07

Affected products

• Calendarix Advanced (Vincent Hor)

References

• http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html
• http://securitytracker.com/alerts/2005/May/1014083.html