CVE-2010-0380 | BDVDB-2026-40135 Detail

Description#

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt
http://www.exploit-db.com/exploits/11082

Exploit#

http://www.exploit-db.com/exploits/11082

History#

Version 12010-01-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.