Vulnerability in Calendarscript

CVE-2005-1148

calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information.

EPSS: 0.016 (73.0th percentile) — read the EPSS interpretation.

Affected products

Calendarscript — versions 3.20, 3.21
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)