← Back

Circulargenius

circulargenius

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Flat Calendar
flat_calendar
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6736
1Circulargenius
1Flat Calendar
Apr 23, 2026
Apr 21, 2009
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteE...Show more
Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.Show less