CVE-2009-1223
02.04.2009, 15:30
aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fullrevolution | aspwebcalendar | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration