Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2003-0737

The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library.

  • Published: Oct 20, 2003
  • Updated: Apr 13, 2023
  • CVE: CVE-2003-0737
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
phpwebsite / phpwebsite - 0.9.0.x