Phpmyagenda Phpmyagenda : Security vulnerabilities, CVEs directory traversal published in 2006

CVE-2006-5263

Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently contains PHP code.

Max CVSS

7.5

EPSS Score

1.89%

Published

2006-10-12

Updated

2017-10-19

1 vulnerabilities found

Phpmyagenda » Phpmyagenda : Security Vulnerabilities, CVEs, Published In 2006 (Directory traversal) CVSS score >= 5

CVE-2006-5263