VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 27, 2007· Updated Jun 16, 2026

CVE-2007-3258

CVE-2007-3258

Description

calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Vincent Hor/Calendarix2 versions
    cpe:2.3:a:vincent_hor:calendarix:0.7.2007-03-07:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vincent_hor:calendarix:0.7.2007-03-07:*:*:*:*:*:*:*
    • (no CPE)range: =0.7.20070307

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.