← Database

CVE-2008-4673

CRITICAL CVSS: 10.0 Published: 2008-10-22 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the (1) path[docroot] and (2) component parameters.

Affected Platforms

Webbiscuits Events Calendar

Weakness Type

CWE-94

References