CVE-2005-1147

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1013705Vendor Advisory
http://www.osvdb.org/15546Vendor Advisory
http://www.snkenjoi.com/secadv/secadv3.txtVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20102
http://securitytracker.com/id?1013705Vendor Advisory
http://www.osvdb.org/15546Vendor Advisory
http://www.snkenjoi.com/secadv/secadv3.txtVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20102

Timeline

Published: Apr 12, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-11485.0calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, whi CVE-2005-11497.5SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the (CVE-2005-11505.0Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial CVE-2005-11517.2qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overw CVE-2005-11522.1popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable CVE-2005-11537.5Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascri CVE-2005-11547.5Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter functi CVE-2005-11557.5The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LI CVE-2005-11567.5Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new se CVE-2005-11577.5Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious CVE-2005-11585.0Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using CVE-2005-11597.5The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly veri