Back to Database
Status published
Medium
CVE-2007-3258
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive...
Vulnerability Description
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3258
Credits & Attribution
No credits recorded in the NVD database.
References
More from vincent hor
View All →CVE-2007-3259
Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via...
Medium
5
CVE-2007-3183
Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is...
Medium
6.8
CVE-2007-3182
Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals...
Medium
4.3
CVE-2006-4135
PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401...
High
7.5
CVE-2006-3094
Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier,...
Medium
5.1
Affected Vendor
vincent hor
View all reports →Affected Software
calendarix
Vulnerable Versions:
0.7.2007-03-07
Timeline
Official Publish:
June 27th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.