Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

2008-06-11T00:00:00
ID EXPLOITPACK:925A64A4C77AA63B7D528FA7338A71E3
Type exploitpack
Reporter Crackers_Child
Modified 2008-06-11T00:00:00

Description

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

                                        
                                            source: https://www.securityfocus.com/bid/29662/info

Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.

An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes to its configuration. This may lead to further attacks.

Flat Calendar 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/calender_path/admin/add.php
http://www.example.com/calender_path/admin/deleteEvent.php?eventNumber=[EVENTNUMBERid]