EIP-2026-109925

This entry describes an information leak vulnerability in a PHP calendar script where admin credentials are exposed in a publicly accessible file. The exploit details the location of the file and provides the default admin password hash.