CVE-2005-1147

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.

Date published : 2005-04-16

http://www.snkenjoi.com/secadv/secadv3.txt

http://www.osvdb.org/15546