CVE-2008-3575: PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remot...

Security readout for executives and security teams

CVE-2008-3575 describes a remote file inclusion issue in ezContents CMS. If a vulnerable site exposes the affected calendar PHP file, an attacker could cause the server to run attacker-supplied PHP code. Public data in the bundle does not provide CVSS, affected versions, or a named patch. Exposure is most likely on legacy ezContents CMS installations that still expose modules/calendar/minicalendar.php to the internet. The source bundle does not identify specific affected versions or CPEs, so asset discovery must confirm actual deployments. Prioritize confirmed exposed systems because successful exploitation could mean full application compromise. If no ezContents CMS exists in the environment, document non-exposure and monitor legacy asset discovery. Mitigation focus: Identify and retire any internet-facing ezContents CMS deployments.; Check vendor or maintainer guidance for a fixed release or official workaround.; Restrict public access to affected calendar module paths where business use is not required..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.