Lucene search
HistoryJun 27, 2007 - 5:30 p.m.
CVE-2007-3258
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.01
Percentile
84.0%
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.
Affected configurations
Node
vincent_horcalendarixMatch0.7.2007-03-07
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vincent_hor | calendarix | 0.7.2007-03-07 | cpe:2.3:a:vincent_hor:calendarix:0.7.2007-03-07:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
cvelist
cvelist
CVE-2007-3258
2007-06-27 17:00:00
prion
prion
Design/Logic Flaw
2007-06-27 17:30:00
cve
cve
CVE-2007-3258
2007-06-27 17:30:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.01
Percentile
84.0%
Related for NVD:CVE-2007-3258