← Database

CVE-2006-6800

MEDIUM CVSS: 6.8 Published: 2006-12-28 Modified: 2026-06-16

Description

PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lm_absolute_path parameter.

Affected Platforms

Limbo Cms Event Module

Weakness Type

NVD-CWE-Other

References