CVE-2001-0463

CVE-2001-0463 concerns a directory traversal in the PerlCal component cal_make.pl that allows remote attackers to read arbitrary files by supplying ".." in the p0 parameter. The vulnerability arises from improper handling of file paths in this CGI, enabling access to files the web server user cou...

CVE-2005-4162

CVE-2005-4162 : An XSS vulnerability exists in ACME PerlCal 2.99.20, in the cal_make.pl component, allowing remote attackers to inject arbitrary web script or HTML via the p0 parameter. The issue stems from insufficient input handling in the affected script, enabling script execution when the pag...