Unscored severity · published Mar 19, 2006
CVE-2006-1252
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php
–
CVSS
2.6%
EPSS
No
On KEV
Description
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
Light Weight Calendar · Light Weight Calendar
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1252
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1252
attrition.org
http://attrition.org/pipermail/vim/2006-March/000612.html
Exploit
http://www.securityfocus.com/bid/17059
www.exploit-db.com
https://www.exploit-db.com/exploits/1570
More from Light Weight Calendar
–
CVE-2006-0206
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php,…