Unrated severityNVD Advisory· Published Jul 21, 2006· Updated Jun 16, 2026
CVE-2006-3684
CVE-2006-3684
Description
PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call.
Affected products
2cpe:2.3:a:softcomplex:php_event_calendar:1.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:softcomplex:php_event_calendar:1.4:*:*:*:*:*:*:*
- (no CPE)range: <=1.4
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/21074nvdPatchVendor Advisory
- secunia.com/advisories/21417nvdPatchVendor Advisory
- www.securityfocus.com/bid/18965nvdExploit
- www.securityfocus.com/archive/1/440265/100/0/threadednvd
- www.solpotcrew.org/adv/solpot-adv-01.txtnvd
- www.vupen.com/english/advisories/2006/2848nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27766nvd
News mentions
0No linked articles in our index yet.