PT-2006-6859 · Php · Ltwcalendar

Mootinator

Publicado

2006-12-02

Atualizado

2008-09-05

CVE-2006-6229

CVSS v2.0

5.0

Média

Vetor

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ltwCalendar (aka PHP Event Calendar) versions prior to 4.2.1

Description The issue allows attackers to potentially infer correct passwords from the log file, as failed passwords are logged.

Recommendations For versions prior to 4.2.1, update to version 4.2.1 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2006-6229

Ltwcalendar