What’s Vulnerable › Vulnerabilities

CVE-2006-7055

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-02-24 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execute arbitrary code via a URL in the inc_dir parameter, a different vector than CVE-2006-1922.

Affected products

• Sweetphp Totalcalendar: through 2.30

References

• http://securityreason.com/securityalert/2290
• http://sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip
• http://sweetphp.com/nuke/index.php
• http://www.osvdb.org/25237
• http://www.securityfocus.com/archive/1/431866/30/5370/threaded
• http://www.securityfocus.com/bid/17618
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25878
• https://www.exploit-db.com/exploits/1753
• http://securityreason.com/securityalert/2290
• http://sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip
• http://sweetphp.com/nuke/index.php
• http://www.osvdb.org/25237

Get alerted when CVE-2006-7055 or the next vulnerability affects your stack