WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-05-09 03:02
Updated : 2018-10-18 09:38
NVD link : CVE-2006-2247
Mitre link : CVE-2006-2247
JSON object : View
CWE
Products Affected
webcalendar
- webcalendar