CVE-2010-0380
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD
Description
install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.
Affected (1)
Products: Jce Tech: Php Calendars Script
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Related CWEs
References (4)
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Timeline
No history available yet.