cbcvebase.

Sweetphp Totalcalender vulnerabilities

1 known vulnerability affecting sweetphp/totalcalender.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2009-4929P3HIGHCVSS 7.5PoCv2.42010-07-12
CVE-2009-4929 [HIGH] CWE-287 CVE-2009-4929: admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which al admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters.
nvd
Sweetphp Totalcalender vulnerabilities | cvebase