CVE-2006-0206

Published: Jan 13, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.

Affected (1)

Products: Light Weight Calendar: Light Weight Calendar

Light Weight Calendar

1 product

Light Weight Calendar

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Light Weight Calendar Light Weight Calendar	Version 1.0

References (18)

http://attrition.org/pipermail/vim/2006-March/000612.html

Source: cve@mitre.org

http://evuln.com/vulns/29/exploit.html

Source: cve@mitre.org

Exploit

http://evuln.com/vulns/29/summary.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18450

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/22376

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/421920

Source: cve@mitre.org

http://www.securityfocus.com/bid/16229

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/0171

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24110

Source: cve@mitre.org

http://attrition.org/pipermail/vim/2006-March/000612.html