{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-01-12T00:00:00", "descriptions": [{"lang": "en", "value": "Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://evuln.com/vulns/29/exploit.html"}, {"name": "18450", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18450"}, {"name": "16229", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/16229"}, {"name": "20060318 Source VERIFY - Light Weight Calendar issue is eval injection", "tags": ["mailing-list", "x_refsource_VIM"], "url": "http://attrition.org/pipermail/vim/2006-March/000612.html"}, {"name": "lwc-cal-execute-code(24110)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110"}, {"name": "22376", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/22376"}, {"tags": ["x_refsource_MISC"], "url": "http://evuln.com/vulns/29/summary.html"}, {"name": "ADV-2006-0171", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/0171"}, {"name": "20060113 [eVuln] Light Weight Calendar PHP Code Execution", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/421920"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-0206", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://evuln.com/vulns/29/exploit.html", "refsource": "MISC", "url": "http://evuln.com/vulns/29/exploit.html"}, {"name": "18450", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18450"}, {"name": "16229", "refsource": "BID", "url": "http://www.securityfocus.com/bid/16229"}, {"name": "20060318 Source VERIFY - Light Weight Calendar issue is eval injection", "refsource": "VIM", "url": "http://attrition.org/pipermail/vim/2006-March/000612.html"}, {"name": "lwc-cal-execute-code(24110)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110"}, {"name": "22376", "refsource": "OSVDB", "url": "http://www.osvdb.org/22376"}, {"name": "http://evuln.com/vulns/29/summary.html", "refsource": "MISC", "url": "http://evuln.com/vulns/29/summary.html"}, {"name": "ADV-2006-0171", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/0171"}, {"name": "20060113 [eVuln] Light Weight Calendar PHP Code Execution", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/421920"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T16:25:33.979Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://evuln.com/vulns/29/exploit.html"}, {"name": "18450", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18450"}, {"name": "16229", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/16229"}, {"name": "20060318 Source VERIFY - Light Weight Calendar issue is eval injection", "tags": ["mailing-list", "x_refsource_VIM", "x_transferred"], "url": "http://attrition.org/pipermail/vim/2006-March/000612.html"}, {"name": "lwc-cal-execute-code(24110)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110"}, {"name": "22376", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/22376"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://evuln.com/vulns/29/summary.html"}, {"name": "ADV-2006-0171", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/0171"}, {"name": "20060113 [eVuln] Light Weight Calendar PHP Code Execution", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/421920"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-0206", "datePublished": "2006-01-13T23:00:00", "dateReserved": "2006-01-13T00:00:00", "dateUpdated": "2024-08-07T16:25:33.979Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:light_weight_calendar:light_weight_calendar:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "FA2D9CE2-E12E-4325-8B39-22E6D2295ADF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n Eval en Light Weight Calendar (LWC) 1.0 (20040909) y versiones anteriores permite a atacantes remotos ejecutar c\u00f3digo PHP arbitrario a trav\u00e9s del par\u00e1metro date en cal.php, que est\u00e1 incluido en index.php."}], "id": "CVE-2006-0206", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-01-13T23:03:00.000", "references": [{"source": "cve@mitre.org", "url": "http://attrition.org/pipermail/vim/2006-March/000612.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://evuln.com/vulns/29/exploit.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://evuln.com/vulns/29/summary.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/18450"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/22376"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/421920"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/16229"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/0171"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://attrition.org/pipermail/vim/2006-March/000612.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://evuln.com/vulns/29/exploit.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://evuln.com/vulns/29/summary.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/18450"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/22376"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/421920"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/16229"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/0171"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}