Name | CVE-2007-1483 |
Description | Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to (1) login.php, (2) get_reminders.php, or (3) get_events.php. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
The information below is based on the following data on fixed versions.
Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
---|---|---|---|---|---|---|
webcalendar | source | sarge | 0.9.45-4sarge7 | |||
webcalendar | source | (unstable) | 1.0.5-1 | high |
This was fixed in Sarge as a side-effect of an earlier fix, marking current
Sarge version as fixed version