• info
• discussion
• exploit
• solution
• references

WebCalendar Edit_User_Handler.PHP Unauthorized Access Vulnerability

Solution:
An updated version of WebCalendar has been released:


k5n WebCalendar 0.9.31

• Craig Knudsen WebCalendar-0.9.35.tar.gz
  http://prdownloads.sourceforge.net/webcalendar/WebCalendar-0.9.35.tar. gz?download

k5n WebCalendar 0.9.32

• Craig Knudsen WebCalendar-0.9.35.tar.gz
  http://prdownloads.sourceforge.net/webcalendar/WebCalendar-0.9.35.tar. gz?download

k5n WebCalendar 0.9.33

• Craig Knudsen WebCalendar-0.9.35.tar.gz
  http://prdownloads.sourceforge.net/webcalendar/WebCalendar-0.9.35.tar. gz?download

k5n WebCalendar 0.9.34

• Craig Knudsen WebCalendar-0.9.35.tar.gz
  http://prdownloads.sourceforge.net/webcalendar/WebCalendar-0.9.35.tar. gz?download