CVE-2011-3814

Name of the Vulnerable Software and Affected Versions WebCalendar versions 1.2.3 through 1.2.4

Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as ws/user mod.php, which reveals the installation path in an error message.

Recommendations For versions 1.2.3 through 1.2.4, consider restricting access to sensitive .php files, such as ws/user mod.php, to prevent information disclosure until a fix is available.