VULNERABILITY INTELLIGENCE
CVE-2007-3258
CVSS score5 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2007-06-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.