[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
aspWebCalendar Free Edition bug
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: aspWebCalendar Free Edition bug
- From: joseph.giron13@xxxxxxxxx
- Date: 31 Mar 2009 03:46:19 -0000
I'm not sure how to classify this bug / vulnerability, but for aspWebCalendar
Free edition, you can openly download the mdb file and read its contents
(username,pasword).
Example
http://www.example.com/calendar/calendar.mdb
I guess the fix would be to place the mdb file outside of wwwroot.