Bugtraq mailing list archives
aspWebCalendar Free Edition bug
From: joseph.giron13 () gmail com
Date: 31 Mar 2009 03:46:19 -0000
I'm not sure how to classify this bug / vulnerability, but for aspWebCalendar Free edition, you can openly download the mdb file and read its contents (username,pasword). Example http://www.example.com/calendar/calendar.mdb I guess the fix would be to place the mdb file outside of wwwroot.
Current thread:
- aspWebCalendar Free Edition bug joseph . giron13 (Mar 31)