Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

webcalendar: missing input sanitizing

Package(s):

webcalendar

CVE #(s):

CVE-2007-1343

Created:

March 16, 2007

Updated:

March 21, 2007

Description:

It was discovered that WebCalendar, a PHP-based calendar application, insufficiently protects an internal variable, which allows remote file inclusion.

Alerts:

Debian

DSA-1267-1

2007-03-15

(Log in to post comments)