Vulnerability Details CVE-2008-6357
MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 83.6%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2008-6357
-
cpe:2.3:a:donnafontenot:mycal_personal_events_calendar:-