Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

webcalendar: uninitialized variable

Package(s):

webcalendar

CVE #(s):

CVE-2006-2762

Created:

June 13, 2006

Updated:

June 14, 2006

Description:

A vulnerability has been discovered in webcalendar, a PHP-based multi-user calendar, that allows a remote attacker to execute arbitrary PHP code when register_globals is turned on.

Alerts:

Debian

DSA-1096-1

2006-06-13

(Log in to post comments)