Security Advisory
CVE-2005-1147
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.