Description
Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to (1) agendaplace.php3, (2) agendaplace2.php3, (3) infoevent.php3, and (4) agenda2.php3, different vectors than CVE-2006-2009.
References
- 29151 vdb-entry
- 29150 vdb-entry
- 29149 vdb-entry
- phpmyagenda-rootagenda-file-include(26062) vdb-entry
- http://osvdb.org/ref/29/2914x-phpmyagenda.txt
- 20060515 tyree[at]users.sourceforge.net mailing-list
- http://sourceforge.net/forum/forum.php?forum_id=569237
- 29148 vdb-entry