WebCalendar是一款基于PHP的WEB应用程序。 WebCalendar不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'includedir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 k5n WebCalendar 1.0.3 k5n WebCalendar 1.0.2 k5n WebCalendar 1.0.1 k5n WebCalendar 1.0 RC3 k5n WebCalendar 1.0 rc2 k5n WebCalendar 1.0 RC1 k5n WebCalendar 1.0 k5n WebCalendar 0.9.50 k5n WebCalendar 0.9.45 - Debian Linux 3.1 sparc - Debian Linux 3.1 sparc - Debian Linux 3.1 s/390 - Debian Linux 3.1 s/390 - Debian Linux 3.1 ppc - Debian Linux 3.1 ppc - Debian Linux 3.1 mipsel - Debian Linux 3.1 mipsel - Debian Linux 3.1 mips - Debian Linux 3.1 mips - Debian Linux 3.1 m68k - Debian Linux 3.1 m68k - Debian Linux 3.1 ia-64 - Debian Linux 3.1 ia-64 - Debian Linux 3.1 ia-32 - Debian Linux 3.1 ia-32 - Debian Linux 3.1 hppa - Debian Linux 3.1 hppa - Debian Linux 3.1 arm - Debian Linux 3.1 arm - Debian Linux 3.1 alpha - Debian Linux 3.1 alpha - Debian Linux 3.1 - Debian Linux 3.1 k5n WebCalendar 0.9.43 k5n WebCalendar 0.9.42 k5n WebCalendar 0.9.41...
WebCalendar是一款基于PHP的WEB应用程序。 WebCalendar不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'includedir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 k5n WebCalendar 1.0.3 k5n WebCalendar 1.0.2 k5n WebCalendar 1.0.1 k5n WebCalendar 1.0 RC3 k5n WebCalendar 1.0 rc2 k5n WebCalendar 1.0 RC1 k5n WebCalendar 1.0 k5n WebCalendar 0.9.50 k5n WebCalendar 0.9.45 - Debian Linux 3.1 sparc - Debian Linux 3.1 sparc - Debian Linux 3.1 s/390 - Debian Linux 3.1 s/390 - Debian Linux 3.1 ppc - Debian Linux 3.1 ppc - Debian Linux 3.1 mipsel - Debian Linux 3.1 mipsel - Debian Linux 3.1 mips - Debian Linux 3.1 mips - Debian Linux 3.1 m68k - Debian Linux 3.1 m68k - Debian Linux 3.1 ia-64 - Debian Linux 3.1 ia-64 - Debian Linux 3.1 ia-32 - Debian Linux 3.1 ia-32 - Debian Linux 3.1 hppa - Debian Linux 3.1 hppa - Debian Linux 3.1 arm - Debian Linux 3.1 arm - Debian Linux 3.1 alpha - Debian Linux 3.1 alpha - Debian Linux 3.1 - Debian Linux 3.1 k5n WebCalendar 0.9.43 k5n WebCalendar 0.9.42 k5n WebCalendar 0.9.41 k5n WebCalendar 0.9.40 k5n WebCalendar 0.9.39 k5n WebCalendar 0.9.38 k5n WebCalendar 0.9.36 k5n WebCalendar 0.9.35 k5n WebCalendar 0.9.34 k5n WebCalendar 0.9.33 k5n WebCalendar 0.9.32 k5n WebCalendar 0.9.31 k5n WebCalendar 0.9.30 k5n WebCalendar 0.9.29 k5n WebCalendar 0.9.28 k5n WebCalendar 0.9.27 k5n WebCalendar 0.9.26 k5n WebCalendar 0.9.26 k5n WebCalendar 0.9.25 k5n WebCalendar 0.9.25 k5n WebCalendar 0.9.24 k5n WebCalendar 0.9.23 k5n WebCalendar 0.9.23 k5n WebCalendar 0.9.22 k5n WebCalendar 0.9.22 k5n WebCalendar 0.9.21 k5n WebCalendar 0.9.21 k5n WebCalendar 0.9.20 k5n WebCalendar 0.9.19 k5n WebCalendar 0.9.16 k5n WebCalendar 0.9.15 k5n WebCalendar 0.9.11 k5n WebCalendar 0.9.11 k5n WebCalendar 0.9.8 k5n WebCalendar 0.1 .0 目前没有解决方案提供： <a href="http://www.k5n.us/index.php" target="_blank">http://www.k5n.us/index.php</a>
