cbcvebase.

Circulargenius Flat Calendar vulnerabilities

1 known vulnerability affecting circulargenius/flat_calendar.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2008-6736P3MEDIUMCVSS 6.4PoCv1.12009-04-21
CVE-2008-6736 [MEDIUM] CWE-264 CVE-2008-6736: Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documen
nvd
Circulargenius Flat Calendar vulnerabilities | cvebase