CVE-2005-2576: Undefined Security Weakness

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to 1 doclsqlres.php, 2 clmcpreload.php, 3 viewhistlog.php, 4 mcconfig.php, 5 doclsqlbak.php, 6 defcalsel.php, or 7 clminical.php, which reveals the path in an error message...

CVE-2005-2321: Undefined Security Weakness

PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to 1 clminical.php, 2 clmcpreload.php, 3 mcconfig.php, or 4 mcpi-demo.php...