CVE-2005-1148

calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.58% chance of exploitation in the next 30 days, 74th percentile

Published

2005-04-16

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.snkenjoi.com/secadv/secadv3.txt

References

• CVE Record
• NVD entry

Related

• CVE-2005-1135
• CVE-2005-1149
• CVE-2005-1134
• CVE-2005-1161
• CVE-2005-1130
• CVE-2005-1162