CVE-2017-15891

Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors...

CVE-2017-15891

Synology Calendar (before 2.0.1-0242) is affected by an improper access control vulnerability in SYNO.Cal.EventBase. Remote authenticated users can modify calendar events via unspecified vectors. Root cause: access control flaw in EventBase handling. Impact: ability to alter events without proper...

phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting

phpCommunityCalendar 4.0.3 possibly prior versions sql injection / login bypass / cross site scripting software: site: http://open.appideas.com download: http://open.appideas.com/Calendar/ 1 sql injection / login bypass: "admin" directory contains tools for the site administrator. "webadmin"...