CVE-2005-1147

CVE-2005-1147 affects CalendarScript 3.20’s calendar.pl, where remote attackers can trigger information disclosure through invalid (1) calendar or (2) template parameters. The issue leaks the full pathname and debug information, revealing sensitive data and indicating a flaw in input validation f...

CVE-2005-1145

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in calendar.pl in CalendarScript 3.20 allows remote attackers to inject arbitrary web script or HTML via the template parameter, a different vulnerability than CVE-2005-1146...

CVE-2005-1147

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid 1 calendar or 2 template parameters, which leaks the full pathname and debug information...