CVE-2006-2762 - CVE House
Back to Database
Status published Medium CVE-2006-2762

PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3...

Vulnerability Description

PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2762

Credits & Attribution

No credits recorded in the NVD database.

References

More from webcalendar

View All →
CVE-2008-1954
SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1...
High 7.5
CVE-2007-6696
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote...
Low 2.1
CVE-2007-1343
includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect...
High 7.5
CVE-2006-6669
Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and...
Medium 6.8
CVE-2006-2247
WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on...
Medium 5

Affected Vendor

webcalendar

View all reports →

Affected Software

webcalendar
Vulnerable Versions:
1.0.3

Timeline

Official Publish: June 2nd, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.