vendor:
TotalCalendar
by:
Aesthetico
7,5
CVSS
HIGH
Remote File Include
98
CWE
Product Name: TotalCalendar
Affected Version From: 2.30
Affected Version To: 2.30
Patch Exists: YES
Related CWE: CVE-2006-2590
CPE: a:sweetphp:totalcalendar
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2006
TotalCalendar <=2.30 - Remote File Include Vulnerability
TotalCalendar <=2.30 is vulnerable to a remote file include vulnerability. This vulnerability allows an attacker to include a remote file, usually resulting in a remote command execution.
Mitigation:
Upgrade to the latest version of TotalCalendar
