PT-2006-6859 · Php · Ltwcalendar

Mootinator · Published 2006-12-02 · Updated 2008-09-05 · CVE-2006-6229

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ltwCalendar (aka PHP Event Calendar) versions prior to 4.2.1

Description The issue allows attackers to potentially infer correct passwords from the log file, as failed passwords are logged.

Recommendations For versions prior to 4.2.1, update to version 4.2.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-6229

Affected Products

Ltwcalendar

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-6229 · Security Note
• http://ltwcalendar.sourceforge.net/changelog.php · Note