CVE:CVE-2004-1508
CNNVD:CNNVD-200412-392
WebCalendar的init.php存在漏洞。远程攻击者可以借助user_inc参数执行任意本地PHP脚本。
solution:Upgrade webcalendar webcalendar to a higher version than 0.9.8,0.9.11,0.9.15,0.9.16,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,0.9.31,0.9.32,0.9.33,0.9.34,0.9.35,0.9.36,0.9.37,0.9.38,0.9.39,0.9.40,0.9.41,0.9.42,0.9.43,0.9.44,and avoid the version 0.9.8,0.9.11,0.9.15,0.9.16,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,0.9.31,0.9.32,0.9.33,0.9.34,0.9.35,0.9.36,0.9.37,0.9.38,0.9.39,0.9.40,0.9.41,0.9.42,0.9.43,0.9.44