PatchTheCVEphp icalendar vulnerabilities
Recent CVEs affecting php icalendar products. 6 tracked.
php icalendar has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2006-12-29. Highest priority: CVE-2006-1291 (score 55/100).
- CVE-2006-6824 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earli
- CVE-2006-3319 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier allows remote atta
- CVE-2006-1292 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attac
- CVE-2006-1291 HIGH 7.5 UPGRADE publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for
- CVE-2006-0648 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to in
- CVE-2005-3366 MEDIUM 6.8 DOWNGRADE PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to
FAQ
How do I fix php icalendar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php icalendar being exploited right now?
None of the tracked php icalendar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php icalendar CVE should I patch first?
CVE-2006-1291 currently ranks highest (55/100): publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for .