CVE-2010-0638

2010-02-1518:00:00

mitre

www.cve.org

webcalendar csrf vulnerability

admin password hijacking

remote attackers

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

49.7%

JSON

Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/38222