GCVE - cpe:2.3:a:george_lewe:teamcal_pro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:george_lewe:teamcal_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	George Lewe (`64041a44-c52b-54be-92c5-54c4c486857d`)
Product	Teamcal Pro (`9a8384ca-b7c0-5863-82b8-c9861d0625bc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6554`	vulnerable	2026-06-08 04:50:09.070176	Details available Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) register.php, (3) login.php, or (4) statistics.php. Published: 2007-12-28T00:00:00.000Z Updated: 2024-08-07T16:11:06.032Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/4785 https://exchange.xforce.ibmcloud.com/vulnerabilities/39212 http://osvdb.org/39829 http://osvdb.org/39828 http://osvdb.org/39827	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6553`	vulnerable	2026-06-08 04:50:09.069756	Details available Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845. Published: 2007-12-28T00:00:00.000Z Updated: 2024-08-07T16:11:06.050Z Open on db.gcve.eu Reference links http://osvdb.org/39813 http://osvdb.org/39821 http://osvdb.org/39809 http://osvdb.org/39811 http://osvdb.org/39820	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4845`	vulnerable	2026-06-08 04:49:19.000642	Details available PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tc_config[app_root] parameter. Published: 2006-09-19T01:00:00.000Z Updated: 2024-08-07T19:23:41.267Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/28956 http://www.vupen.com/english/advisories/2006/3630 http://www.securityfocus.com/bid/20036 https://www.exploit-db.com/exploits/2368 http://secunia.com/advisories/21933	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.