Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1003256 | |
http://www.kb.cert.org/vuls/id/806091 | Patch US Government Resource |
http://www.securityfocus.com/bid/3856 | Patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/7966 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2002-12-31 05:00
Updated : 2024-02-04 16:31
NVD link : CVE-2002-1626
Mitre link : CVE-2002-1626
CVE.ORG link : CVE-2002-1626
JSON object : View
Products Affected
mike_spice
- my_calendar
CWE