Unrated severityNVD Advisory· Published Jun 27, 2007· Updated Apr 23, 2026
CVE-2007-3258
CVE-2007-3258
Description
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.
Affected products
1- cpe:2.3:a:vincent_hor:calendarix:0.7.2007-03-07:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.netvigilance.com/advisory0035nvdVendor Advisory
- marc.infonvd
- marc.infonvd
- www.osvdb.org/35371nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/35047nvd
News mentions
0No linked articles in our index yet.