In LuxSoft LuxCal Web Calendar prior to 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
luxsoft luxcal |