Description
Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
References
- 1003256 vdb-entry
- VU#806091 third-party-advisory
- 3856 vdb-entry
- mycalendar-gain-privileges(7966) vdb-entry