CVE-2006-3684

PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call.

• http://secunia.com/advisories/21074Patch, Vendor Advisory
• http://secunia.com/advisories/21417Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/440265/100/0/threaded
• http://www.securityfocus.com/bid/18965Exploit
• http://www.solpotcrew.org/adv/solpot-adv-01.txt
• http://www.vupen.com/english/advisories/2006/2848
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27766
• http://secunia.com/advisories/21074Patch, Vendor Advisory
• http://secunia.com/advisories/21417Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/440265/100/0/threaded
• http://www.securityfocus.com/bid/18965Exploit
• http://www.solpotcrew.org/adv/solpot-adv-01.txt
• http://www.vupen.com/english/advisories/2006/2848
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27766

Published

Jul 21, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3678TippingPoint IPS running the TippingPoint Operating System (…
• CVE-2006-3679FatWire Content Server 5.5.0 allows remote attackers to bypa…
• CVE-2006-3680Cross-site scripting (XSS) vulnerability in photocycle in Ph…
• CVE-2006-3681Multiple cross-site scripting (XSS) vulnerabilities in awsta…
• CVE-2006-3682awstats.pl in AWStats 6.5 build 1.857 and earlier allows rem…
• CVE-2006-3683PHP remote file inclusion vulnerability in poll.php in Flipp…
• CVE-2006-3685PHP remote file inclusion vulnerability in CzarNews 1.12 thr…
• CVE-2006-3686Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenV…
• CVE-2006-3687Stack-based buffer overflow in the Universal Plug and Play (…
• CVE-2006-3688SQL injection vulnerability in Room.php in Francisco Charrua…
• CVE-2006-3689PHP remote file inclusion vulnerability in user-func.php in …
• CVE-2006-3690Multiple PHP remote file inclusion vulnerabilities in MiniBB…