CVE-2010-0638

Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Link Resource
http://secunia.com/advisories/38222 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:k5n:webcalendar:1.2.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-02-15 18:30

Updated : 2023-12-10 11:03


NVD link : CVE-2010-0638

Mitre link : CVE-2010-0638

CVE.ORG link : CVE-2010-0638


JSON object : View

Products Affected

k5n

  • webcalendar
CWE
CWE-352

Cross-Site Request Forgery (CSRF)