Vulnerabilities > CVE-2007-0928 - Unspecified vulnerability in Virtual Calendar Virtual Calendar

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
virtual-calendar
NVD
Published: 2007-02-14
Updated: 2024-11-21

Summary

Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an encoded password via a direct request for pwd.txt.

Vulnerable Configurations

Part Description Count
Application
Virtual_Calendar
1

References