Intrusion PreventionACal.Arbitrary.Command.Execution
Description
It indicates a possible exploit of a PHP remote file inclusion vulnerability in ACal.
This flaw is due to an input validation error in the "embed/day.php" script that does not validate the "path" parameter.
Affected Products
ACal ACal 2.2.6
ACal ACal 2.2.5
ACal ACal 2.2.4
Impact
The execution of arbitrary PHP code on the system.
Recommended Actions
Currently we are not aware of any official supplied fix for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14343 |
| Created | Mar 14, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-2261 |
| Exploit Prediction Score | 15.33% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |