Security Advisory

CVE-2008-5968

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-01-26 20:00:00
Last updated 2024-08-07 11:13:13
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1292.