Skip to content
OpenAdvisories
Unscored CVE-2009-4928 EUVD-2009-4890GHSA-5vcw-72h8-x9g2

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL …

Published Jul 9, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055.

References