Vulnerabilities > Donnafontenot
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-03-02 | CVE-2008-6357 | Permissions, Privileges, and Access Controls vulnerability in Donnafontenot Mycal Personal Events Calendar MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb. | 5.0 |
| 2009-03-02 | CVE-2008-6356 | Permissions, Privileges, and Access Controls vulnerability in Donnafontenot Evcal Events Calendar evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to (1) evcal.mdb and (2) evcal97.mdb. | 5.0 |