Vulnerabilities > CVE-2002-2065 - Information Disclosure vulnerability in WebCalendar Include Files
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 4 |