Light Weight Calendar Index.PHP Remote Command Execution Vulnerability

Bugtraq ID:	16229
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 13 2006 12:00AM
Updated:	Jan 13 2006 12:00AM
Credit:	Aliaksandr Hartsuyeu is credited with the discovery of this vulnerability.
Vulnerable:	Light Weight Calendar Light Weight Calendar 1.0
Not Vulnerable:

Light Weight Calendar Index.PHP Remote Command Execution Vulnerability

Light Weight Calendar is prone to a remote command execution vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this issue to execute arbitrary remote PHP commands on an affected computer with the privileges of the Web server process.

Successful exploitation could facilitate unauthorized access; other attacks are also possible.

Light Weight Calendar Index.PHP Remote Command Execution Vulnerability

An exploit is not required.

An example URI has been provided:

http://www.example.com/lwc/index.php?stam=1928504&date=20050901);%20echo%20(%60ls%20-la%60&View=month

Light Weight Calendar Index.PHP Remote Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Light Weight Calendar Index.PHP Remote Command Execution Vulnerability

References:

• Dreamcost.com Web Site (DreamAccount )
  
• Light Weight Calendar PHP Code Execution (Aliaksandr Hartsuyeu)
  
• Light Weight Calendar PHP Code Execution ([email protected])