Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-3259
HistoryJun 26, 2007 - 5:30 p.m.

CVE-2007-3259

2007-06-2617:30:00
[email protected]
web.nvd.nist.gov
4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.008

Percentile

81.5%

JSON

Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via (1) an invalid month[] parameter to calendar.php, (2) an invalid catview[] parameter to cal_week.php in a week operation, (3) an invalid ycyear[] parameter to yearcal.php, or (4) a direct request to cal_functions.inc.php, which reveals the installation path in various error messages.

Affected configurations

Nvd
Node
vincent_horcalendarixMatch0.7.2007-03-07
VendorProductVersionCPE
vincent_horcalendarix0.7.2007-03-07cpe:2.3:a:vincent_hor:calendarix:0.7.2007-03-07:*:*:*:*:*:*:*

Related

securityvulns 2
cve 1
prion 1
cvelist 1
securityvulns
securityvulns
Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities
2007-06-26 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2007-06-26 00:00:00
cve
cve
CVE-2007-3259
2007-06-26 17:30:00
prion
prion
Design/Logic Flaw
2007-06-26 17:30:00
cvelist
cvelist
CVE-2007-3259
2007-06-26 17:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.008

Percentile

81.5%

JSON
Related for NVD:CVE-2007-3259
securityvulns2cve1prion1cvelist1