CVEvulnerability
CVE-2005-2320
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges.
Affected configurations
• webcalendar webcalendar 0.9.8
• webcalendar webcalendar 0.9.11
• webcalendar webcalendar 0.9.15
• webcalendar webcalendar 0.9.16
• webcalendar webcalendar 0.9.19
• webcalendar webcalendar 0.9.20
• webcalendar webcalendar 0.9.21
• webcalendar webcalendar 0.9.22
• webcalendar webcalendar 0.9.23
• webcalendar webcalendar 0.9.24
• webcalendar webcalendar 0.9.25
• webcalendar webcalendar 0.9.26
• webcalendar webcalendar 0.9.27
• webcalendar webcalendar 0.9.28
• webcalendar webcalendar 0.9.29
• webcalendar webcalendar 0.9.30
• webcalendar webcalendar 0.9.31
• webcalendar webcalendar 0.9.32
• webcalendar webcalendar 0.9.33
• webcalendar webcalendar 0.9.34
• webcalendar webcalendar 0.9.35
• webcalendar webcalendar 0.9.36
• webcalendar webcalendar 0.9.37
• webcalendar webcalendar 0.9.38
• webcalendar webcalendar 0.9.39
• webcalendar webcalendar 0.9.40
• webcalendar webcalendar 0.9.41
• webcalendar webcalendar 0.9.42
• webcalendar webcalendar 0.9.43
• webcalendar webcalendar 0.9.44
• webcalendar webcalendar 0.9.45
• webcalendar webcalendar 0.9.50
• webcalendar webcalendar 1.0.0