ByteOS Network

NVD Vulnerability Details :

CVE-2007-6553

Modified

Source-cve@mitre.org

Published At-28 Dec, 2007 | 00:46

Updated At-29 Sep, 2017 | 01:29

Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

george_lewe>>teamcal_pro>>Versions up to 3.1.000(inclusive)

cpe:2.3:a:george_lewe:teamcal_pro:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/39805	cve@mitre.org	N/A
http://osvdb.org/39806	cve@mitre.org	N/A
http://osvdb.org/39807	cve@mitre.org	N/A
http://osvdb.org/39808	cve@mitre.org	N/A
http://osvdb.org/39809	cve@mitre.org	N/A
http://osvdb.org/39810	cve@mitre.org	N/A
http://osvdb.org/39811	cve@mitre.org	N/A
http://osvdb.org/39812	cve@mitre.org	N/A
http://osvdb.org/39813	cve@mitre.org	N/A
http://osvdb.org/39814	cve@mitre.org	N/A
http://osvdb.org/39815	cve@mitre.org	N/A
http://osvdb.org/39816	cve@mitre.org	N/A
http://osvdb.org/39817	cve@mitre.org	N/A
http://osvdb.org/39818	cve@mitre.org	N/A
http://osvdb.org/39819	cve@mitre.org	N/A
http://osvdb.org/39820	cve@mitre.org	N/A
http://osvdb.org/39821	cve@mitre.org	N/A
http://osvdb.org/39822	cve@mitre.org	N/A
http://osvdb.org/39823	cve@mitre.org	N/A
http://osvdb.org/39824	cve@mitre.org	N/A
http://osvdb.org/39825	cve@mitre.org	N/A
http://osvdb.org/39826	cve@mitre.org	N/A
http://www.securityfocus.com/bid/27022	cve@mitre.org	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/39212	cve@mitre.org	N/A
https://www.exploit-db.com/exploits/4785	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History