CVE-2006-0206

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-01-13 · updated 2026-06-16

Description

Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.

Affected products

Light Weight Calendar: 1.0

References

http://attrition.org/pipermail/vim/2006-March/000612.html
http://evuln.com/vulns/29/exploit.html
http://evuln.com/vulns/29/summary.html
http://secunia.com/advisories/18450
http://www.osvdb.org/22376
http://www.securityfocus.com/archive/1/421920
http://www.securityfocus.com/bid/16229
http://www.vupen.com/english/advisories/2006/0171
https://exchange.xforce.ibmcloud.com/vulnerabilities/24110
http://attrition.org/pipermail/vim/2006-March/000612.html
http://evuln.com/vulns/29/exploit.html
http://evuln.com/vulns/29/summary.html

Get alerted when CVE-2006-0206 or the next vulnerability affects your stack