Vulnerability Details : CVE-2006-0206
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.
Exploit prediction scoring system (EPSS) score for CVE-2006-0206
Probability of exploitation activity in the next 30 days: 12.82%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 95 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-0206
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2006-0206
-
http://www.vupen.com/english/advisories/2006/0171
- http://attrition.org/pipermail/vim/2006-March/000612.html
-
http://www.securityfocus.com/archive/1/421920
-
http://www.securityfocus.com/bid/16229
Exploit
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/24110
-
http://evuln.com/vulns/29/exploit.html
Exploit
-
http://evuln.com/vulns/29/summary.html
Exploit;Vendor Advisory
Products affected by CVE-2006-0206
- cpe:2.3:a:light_weight_calendar:light_weight_calendar:1.0:*:*:*:*:*:*:*