cbcvebase.

Extcalendar Project Extcalendar vulnerabilities

1 known vulnerability affecting extcalendar_project/extcalendar.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2007-0681P3CRITICALCVSS 9.8PoC≤ 22007-02-03
CVE-2007-0681 [CRITICAL] CWE-522 CVE-2007-0681: profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrar profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php.
nvd
Extcalendar Project Extcalendar vulnerabilities | cvebase