Description
validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message.
References
- 20041109 Multiple Vulnerabilities in WebCalendar mailing-list
- webcalendar-encodedlogin-path-disclosure(18029) vdb-entry
- 11651 vdb-entry
- 13164 third-party-advisory