CVE-2011-3814

WebCalendar 1.2.3 (and earlier up to 1.2.4/1.2.5 line) is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting certain PHP files, exposing the installation path in error messages (notably ws/user_mod.php). Affected version ran...