Skip to content
Noroxi

acal records

3 published records for vendor acal.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      3 records
      • CVE-2006-2261
        31Monitor

        PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path

        HighCVSS 7.5Proof of conceptEPSS 3%

        acal · acalMay 9, 2006

      • CVE-2006-0182
        31Monitor

        login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to

        HighCVSS 7.5No exploitEPSS 1%

        acal · calendar projectJan 12, 2006

      • CVE-2006-0183
        26Monitor

        Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP co

        MediumCVSS 6.5No exploitEPSS 1%

        acal · calendar projectJan 12, 2006