Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Circulargenius Subscribe
Filtered by product Flat Calendar
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-6736 1 Circulargenius 1 Flat Calendar 2018-10-11 6.4 MEDIUM N/A
Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.