CVE-2009-1223
EUVD-2009-122202.04.2009, 15:30
aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fullrevolution | aspwebcalendar | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration