CVE-2005-1864: Vincent Hor Calendarix Advanced

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.

Affected products

• Vincent Hor Calendarix Advanced: version 1.5 only

Published 2005-06-09. Last modified 2026-06-16.