CVE-2007-3258
Last modified
CVE-2007-3258 is a vulnerability of currently unknown severity. calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.. EPSS estimates a 1.26% chance of exploitation in the next 30 days.
Description
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vincent Hor | Calendarix | 0.7.2007-03-07 |
References
- http://www.netvigilance.com/advisory0035Vendor Advisory
- http://www.netvigilance.com/advisory0035Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3258?
How severe is CVE-2007-3258?
How do I fix CVE-2007-3258?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3252PortalApp stores sensitive information under the web root wi…
- CVE-2007-3253Multiple unspecified vulnerabilities in Astaro Security Gate…
- CVE-2007-3254Multiple cross-site scripting (XSS) vulnerabilities in Xytho…
- CVE-2007-3255Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2007-3256Xythos Enterprise Document Manager (XEDM), Digital Locker (X…
- CVE-2007-3257Camel (camel-imap-folder.c) in the mailer component for Evol…
- CVE-2007-3259Calendarix 0.7.20070307 allows remote attackers to obtain se…
- CVE-2007-3260HP System Management Homepage (SMH) before 2.1.9 for Linux, …
- CVE-2007-3261Cross-site scripting (XSS) vulnerability in widgets/widget_s…
- CVE-2007-3262Unspecified vulnerability in the Default Messaging Component…
- CVE-2007-3263Unspecified vulnerability in the Default Messaging Component…
- CVE-2007-3264Unspecified vulnerability in the PD tools component in IBM W…
Are you affected by CVE-2007-3258?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST