CVEvulnerability

CVE-2005-1147

5.0 MEDIUM Published 2005-04-12 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-04-12
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.

References

http://securitytracker.com/id?1013705 Vendor Advisory
http://www.osvdb.org/15546 Vendor Advisory
http://www.snkenjoi.com/secadv/secadv3.txt Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20102 exchange.xforce.ibmcloud.com
http://securitytracker.com/id?1013705 Vendor Advisory
http://www.osvdb.org/15546 Vendor Advisory
http://www.snkenjoi.com/secadv/secadv3.txt Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20102 exchange.xforce.ibmcloud.com