CVE-2005-0871 calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal th...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 1.0.1 | No fix listed |
References
- 20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB mailing-list
- 14659 exploit third-party-advisory
- 1013554 vdb-entry
- topic-calendar-path-disclosure(19824) vdb-entry