CVE-2005-1148 calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| calendarscript | = 3.20 | No fix listed |
| calendarscript | = 3.21 | No fix listed |
References
- 1013705 exploit vdb-entry
- www.snkenjoi.com exploit vendor-advisory
- calendarscript-path-disclosure(20102) vdb-entry