PT-2005-3246 · Unknown · Webcalendar

Published 2005-07-19 · Updated 2008-09-05 · CVE-2005-2320

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebCalendar versions prior to 1.0.0

Description The issue is related to improper access restriction to the "assistant edit.php" page, allowing remote attackers to gain privileges.

Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2320

DSA-766-1

Affected Products

Webcalendar

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-2320 · Security Note
• http://securityfocus.com/bid/14072 · Patch