Vulnerability Details CVE-2009-4928
PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 67.8%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2009-4928
-
cpe:2.3:a:sweetphp:totalcalendar:2.4