Beveiligingsadvies

CVE-2008-6736

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2009-04-21 18:07:00

Laatst bijgewerkt 2024-08-07 11:41:59

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.

← Alle CVE's bekijken Bekijk op cve.org ↗