Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebCalendar config.php PHP远程文件包含漏洞
Vulnerability Description
WebCalendar 1.0.3中的includes/config.php存在PHP远程文件包含漏洞，远程攻击者可通过在includedir参数中的URL(fopen调用中远程访问它，调用的结果是用来定义user_inc设置，该设置用于include_once调用中)来执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A