Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-1423
CVE-2004-1423
Description
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php.
Affected products
11cpe:2.3:a:php-calendar:php-calendar:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:php-calendar:php-calendar:*:*:*:*:*:*:*:*range: <=0.10
- cpe:2.3:a:php-calendar:php-calendar:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:php-calendar:php-calendar:0.9.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- www.gulftech.orgnvdExploitPatch
- www.securityfocus.com/bid/12127nvdExploit
- www.vupen.com/english/advisories/2006/4145nvdVendor Advisory
- marc.infonvd
- secunia.com/advisories/22516nvd
- securitytracker.com/idnvd
- sourceforge.net/project/shownotes.phpnvd
- www.securityfocus.com/archive/1/449397/100/0/threadednvd
- www.securityfocus.com/bid/20657nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/18710nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29710nvd
- www.exploit-db.com/exploits/2608nvd
News mentions
0No linked articles in our index yet.