CVE-2008-6736

no score yetEPSS 2.2%

circulargenius flat calendar: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-04-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

circulargenius:flat_calendar

References

http://osvdb.org/51506
http://www.securityfocus.com/archive/1/493278/100/0/threaded
http://www.securityfocus.com/bid/29662
https://exchange.xforce.ibmcloud.com/vulnerabilities/43039
http://osvdb.org/51506

Check your stack JSON