Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1110. PoCs published by Simon Bonnard.
AI-analyzed exploit summary This exploit demonstrates a local file inclusion vulnerability in Active Calendar 1.2.0 due to improper input sanitization. The PoC shows how an attacker can traverse directories to access sensitive files like /etc/passwd.
Description
Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
Exploits (1)
This exploit demonstrates a local file inclusion vulnerability in Active Calendar 1.2.0 due to improper input sanitization. The PoC shows how an attacker can traverse directories to access sensitive files like /etc/passwd.