Vulnerabilities

TI-2005-02036 CVE-2005-2155 · GHSA-f6xp-2qfp-g88p

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows…

LOW 39

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03399 Published 2005-07-06 No fix listed

TI-2005-01082 CVE-2005-1144 · GHSA-mjgx-27h7-p48j

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive…

LOW 26

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01425 Published 2005-04-16 No fix listed

TI-2005-01081 CVE-2005-1143 · GHSA-pxf6-wchc-33ff

Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01208 Published 2005-04-16 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows…

popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive…

Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8…