PT-2005-2821 · Calendarix · Calendarix Advanced

Published 2005-06-07 · Updated 2008-09-05 · CVE-2005-1864

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Calendarix Advanced version 1.5

Description A remote file inclusion issue allows attackers to execute arbitrary PHP code. The issue is related to the calpath parameter in the cal admintop.php file.

Recommendations For Calendarix Advanced version 1.5, consider restricting access to the cal admintop.php file until a patch is available. As a temporary workaround, avoid using the calpath parameter in the affected file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1864

Affected Products

Calendarix Advanced

References · 4

• 🔥 http://securitytracker.com/alerts/2005/May/1014083.html · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1864 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1864 · Note