This is a technical writeup describing a remote database disclosure vulnerability in WEB Calendar software. The vulnerability allows unauthorized access to the calendar35.mdb database file via a direct URL request.
Classification
Writeup 80%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:WEB Calendar (version unspecified, likely 3.5 or 3.6)