CVE-2009-2925: Djcalendar

High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. (dot dot) in the TEMPLATE parameter.

Affected products

• Djcalendar Djcalendar: affected versions not specified

Published 2009-08-21. Last modified 2026-06-16.