PT-2010-2389 · Kessler Consulting · Webcalendar
CVE-2010-0637
·
Published
2010-02-12
·
Updated
2012-10-13
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
WebCalendar versions 1.2.0 through 1.2.5
Description
The issue allows remote attackers to hijack the authentication of administrators for requests, including deleting an event or banning an IP address from posting.
Recommendations
For WebCalendar versions 1.2.0 through 1.2.5, update to a version newer than 1.2.5 to resolve the issue.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Webcalendar