CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1423

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.107

EPSS Ranking 93.0%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2004-1423

Php-Calendar » Php-Calendar » Version: N/A

cpe:2.3:a:php-calendar:php-calendar:-
Php-Calendar » Php-Calendar » Version: 0.1

cpe:2.3:a:php-calendar:php-calendar:0.1
Php-Calendar » Php-Calendar » Version: 0.10

cpe:2.3:a:php-calendar:php-calendar:0.10
Php-Calendar » Php-Calendar » Version: 0.2

cpe:2.3:a:php-calendar:php-calendar:0.2
Php-Calendar » Php-Calendar » Version: 0.3

cpe:2.3:a:php-calendar:php-calendar:0.3
Php-Calendar » Php-Calendar » Version: 0.4

cpe:2.3:a:php-calendar:php-calendar:0.4
Php-Calendar » Php-Calendar » Version: 0.5

cpe:2.3:a:php-calendar:php-calendar:0.5
Php-Calendar » Php-Calendar » Version: 0.6

cpe:2.3:a:php-calendar:php-calendar:0.6
Php-Calendar » Php-Calendar » Version: 0.7

cpe:2.3:a:php-calendar:php-calendar:0.7
Php-Calendar » Php-Calendar » Version: 0.8

cpe:2.3:a:php-calendar:php-calendar:0.8
Php-Calendar » Php-Calendar » Version: 0.9

cpe:2.3:a:php-calendar:php-calendar:0.9
Php-Calendar » Php-Calendar » Version: 0.9.1

cpe:2.3:a:php-calendar:php-calendar:0.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1423

Products

Pricing

Contact Us