CVE-2007-6553

Estado: ModificadaMedia (6.8)—

Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845.

CVSS

Versión: 2.0
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Puntuación base: 6.8

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 3.69%
Percentil entre todas las CVEs puntuadas: 89
Fecha de la puntuación: 3/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

George Lewe — Teamcal PRO

CWE

CWE-94

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2007-6553",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-12-28T00:46:00.000",
  "references": [
    {
      "url": "http://osvdb.org/39805",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39806",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39807",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39808",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39809",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39810",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39811",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39812",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39813",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39814",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39815",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39816",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39817",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39818",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39819",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39820",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39821",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39822",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39823",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39824",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39825",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39826",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/27022",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39212",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/4785",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39805",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39806",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39807",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39808",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39809",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39810",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39811",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39812",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39813",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39814",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39815",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39816",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39817",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39818",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39819",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39820",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39821",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39822",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39823",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39824",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39825",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39826",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/27022",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39212",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/4785",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de inclusión remota de fichero PHP en TeamCal Pro 3.1.000 y versiones anteriores. Permite que atacantes remotos ejecuten código PHP a su elección, a través de una URL en el parámetro CONF[app_root] pasado a (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, o (22) tcuseroption.class.php en el directorio includes/. Posiblmente, un problema relacionado con CVE-2006-4845."
    }
  ],
  "lastModified": "2026-06-16T22:48:19.187",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:george_lewe:teamcal_pro:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9E51DF1-C1FB-43B7-88DA-7BFB6F4C7618",
              "versionEndIncluding": "3.1.000"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}