MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

2009.03.05
Credit: CoBRa_21
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2008-6357
CWE: CWE-264


CVSS Base Score: 5/10
Impact Subscore: 2.9/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: None
Availability impact: None

**************************************************************************************** MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vulnerability **************************************************************************************** Script Name : MyCal Personal Events Calendar Author : CoBRa_21 My Site : www.ipbul.org Download : http://www.funscripts.net/old_coldfusion/download.php?fname=mycal **************************************************************************************** Exploit: http://localhost/[PATH]/database/mycal.mdb **************************************************************************************** Thanks: Cyber-Warrior.Org ****************************************************************************************

References:

http://xforce.iss.net/xforce/xfdb/47266
http://www.milw0rm.com/exploits/7420


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top